Slashdot Mirror


New Chips Keep Tight Rein on Consumers

banannaslug writes "NYTimes (subscription, etc.) talks about Microsofts Palladium. The article addresses how applications of controlling technology affect competition as well as the consumer, can be used to extend monopolies to new markets and has very serious implications for what happens to user driven innovation. We'd have the people's operating system, the people's web browser and the people's media player, and 'computers' would be as useful to innovation as a bicycle to a fish. This is the kind of behavior you expect in a mature industry that tries to add 'law' to preserve failing market models dependent on a lack of competition. Next thing you know they'll want to force customers to upgrade periodically." Point it out to your boss.

175 of 375 comments (clear)

  1. forced upgrades by kipple · · Score: 2

    "Next thing you know they'll want to force customers to upgrade periodically."

    Am I wrong or this is the purpose of the new Microsoft Software Assurance licensing program? Not that they force you to upgrade. But when you pay for a year subscription, most businesses will want to upgrade not to waste the money they spent in the Software Assurance, practically forcing their users to update.

    Now forgive me if I didn't understand the new Microsoft licensing program, that is just an opinion. Cheers.

    --
    -- There are two kind of sysadmins: Paranoids and Losers. (adapted from D. Bach)
    1. Re:forced upgrades by kipple · · Score: 3, Funny

      yes, probably it was sarcasm.... so I'm the one who looks stupid right now :)

      --
      -- There are two kind of sysadmins: Paranoids and Losers. (adapted from D. Bach)
    2. Re:forced upgrades by symbolic · · Score: 2


      I was thinking about this just this morning. I came to the conclusion that it may not be forced upgrade so much as turning software from a commodity into a service. Think about it - how many new features can MS possibly add to its office suite to justify a new upgrade? If the 80/20 rule holds true, then each successive upgrade would hold increasingly diminished returns for the user. So, what better way round this than to scrap the entire model of selling software and offering periodic upgrades to keep your user base interested? Just offer it as a service - you want it, you pay a monthly fee. You don't want it, you don't pay the fee - you get whatever happens to be running on M$'s servers. Can you say CA$H COW?

  2. Forthose who dont want to register with NYT. by h4mmer5tein · · Score: 3, Informative

    name : spamfree pw : spamfree

  3. Free market by nuggz · · Score: 2

    If you don't like it don't buy it. Nobody is forcing you to buy these computers.

    The only complaint people seem to have is that if the general population buys into this, then we won't get the discount of commodity hardware.

    The current unencumbered hardware isn't going to go away unless people stop buying it, or a law is made against it.

    1. Re:Free market by Platinum+Dragon · · Score: 5, Insightful

      The current unencumbered hardware isn't going to go away unless people stop buying it, or a law is made against it.

      Under the DMCA, unencumbered hardware could be considered a circumvention device to avoid the Palladium-based DRM hooks. And if that's not good enough for the attack lawyers, just remember - the DMCA got passed.

      You bet your ass unencumbered hardware could go away. Give it five years. Five years is forever in the computer industry - remember what hardware you were using five years ago?

      Better to stop this now, before it can take root.

      --

      Someday, you're going to die. Get over it.
    2. Re:Free market by SirSlud · · Score: 5, Insightful

      > Government needs to require all entertainment content to be made available to any distributor who wants to sell it subject to RAND (reasonable and non-discriminatory) license payments if they want to establish a free market.

      Exactly!!!!!!!!!!!!!! (Even if it's unlikely without a significant, long, probably dirty revolt from consumers.)

      Copyright was brought in to force work intop the public domain. I contend that they missed a very important point - the author is not legally allowed to give exclusive access to that content to one distributor. That should be against the law. In the same way that consumers should be free to participate in the market with a reasonable lack of outside influence, so should distributors all have fair and equal access to content, such that their success is built on how well they can deliver and price it, not how much culture, art and content can they withhold from the market and at what price will the market bear _access_ to that content.

      Distributors should be in the business of .. distributing. Currently, its ironic that labels and such, the distributors are doing the very opposite of that - opposing all new forms of distribution and attempting to squeeze success out of creating scarcity of content.

      --
      "Old man yells at systemd"
    3. Re:Free market by nuggz · · Score: 2

      If you don't like the way they are providing Lord of the Rings, don't buy it.
      If I write a book, I don't have to sell it to you or anyone, and the government shouldn't make me.
      The same for any other entertainment product

    4. Re:Free market by plumby · · Score: 2

      If you don't like it don't buy it. Nobody is forcing you to buy these computers.

      Ah yes, the wonder of the "free market".

      Let's see how this could work.

      1) Microsoft decide that they will not support hardware made by companies that also make non-Palladium versions.

      2) Hardware manufacturers see their market disappearing if it won't run with Windows.

      3) All hardware is made Palladium-compatible.

      4) Non-palladium OSes no longer work on the hardware.

      Not too difficult to imagine, is it?

    5. Re:Free market by nuggz · · Score: 2

      #4 Most hardware is made Palladium compatible for mainstream users.
      #4.5 Smaller market consisting of non Palladium hardware for other users

      #5 Smaller hardware market has higher costs, customers complain a bunch about their rights and chose to buy the cheaper less usable hardware

      #6 Hardware companies realizing that people won't pay for the Palladium free hardware stop making it.

      #7 Only Palladium OS's work on the new hardware, because nobody bought Palladium free hardware.

      Wow, looks exactly like the free market to me

    6. Re:Free market by plumby · · Score: 2

      You say nobody buys it. Some people will, but probably not enough. These people will have the choice to have non-Palladium systems taken away from them. And non-Palladium manufacturers will no longer be able to sell their products.

      Isn't one of the claims of the free market that it increases competition and choice for the consumer?

      When one manufacturer can make a decision which uses its large market share to remove the ability for other companies to compete on a level playing field, that can't be a good thing.

    7. Re:Free market by nuggz · · Score: 2

      I believe a free market should provide for maximum or at least high economic efficiency.

      As long as the people continue to pay the cost plus a profit to the company to provide it, I believe the company will continue to make it. However at some point the quantity being sold will become small, and the price very high till nobody wants to buy it and nobody wants to make it.

      It isn't that the products aren't available, it is that people don't want to pay for them

    8. Re:Free market by Bagheera · · Score: 2

      Five years is forever in the computer industry - remember what hardware you were using five years ago?


      Yes, In fact I do. It's the mail and web server we use to support about 30 user accounts and however many thousand hits it gets a day. It's obsolete for gaming maybe, but it's crunched god knows how many SETI units over it's 7 year operational life and is still running strong.

      Making obsolete hardware illegal under the DMCA because it's not Palladium enabled is about as likely as them making my KZ650 illegal because it can still run on leaded gas...

      --
      Never attribute to malice what can as easily be the result of incompetence...
    9. Re:Free market by plumby · · Score: 3, Insightful

      I believe a free market should provide for maximum or at least high economic efficiency

      Why? Who does that benefit? Shouldn't the system provide for the highest quality of life for the largest amount of people? If maximum efficiency means large amounts people get laid off, or have to work for low wages, or in unsafe environments (which it frequently does), then why is this possibly a good thing?

  4. Just a few thoughts... by KC7GR · · Score: 3, Interesting

    Considering that our government tends to treat the entire population of the U.S., collectively, like a bunch of rowdy sixth-graders who can't be trusted to so much as tie their own shoes, does it come as any great surprise that the people behind this insanity (the entertainment industry, and probably Senator 'Disney' Hollings somewhere in the background) are taking pretty much the same view?

    Micro$platt is, in essence, accusing us all of being thieves and media pirates in advance, and they're using that position to justify Palladium. All I can hope is that it'll die the same horrible death as DIVX did.

    One thing I will say: If this goes through at full bore, it'll probably be a huge shot in the arm for the used-computer industry. Perhaps those who have pre-Palladium PCs, and non-PC systems (Suns, MicroVAXen, etc.), shouldn't be so quick to get rid of them.

    Keep the peace(es).

    --

    Bruce Lane, KC7GR,

    Blue Feather Technologies

    1. Re:Just a few thoughts... by Kjella · · Score: 5, Insightful

      most common forms of trojans and backdoors will be effectively eliminated - assuming people don't set the PC to "trust all" sources

      I'm sorry, but you've been listening too much to M$ rethoric. Trojans and other backdoors don't run by themselves (unless you use Outlook :p), people just don't know that they shouldn't run them. This won't stop one bit of trojans / backdoors / viruses / exploits, and if you think so wisen up.

      Kjella

      --
      Live today, because you never know what tomorrow brings
    2. Re:Just a few thoughts... by 0xdeadbeef · · Score: 2, Funny
      Everything here is in the details. With hardware enforced security, MS *could* use it to take complete control over your PC - allowing only MS tested and approved code. But that doesn't benefit them, and so, it won't ever happen.
      Ok, CRACK ADDICT, here is a GUN, see, and I want you to guard my BIG ROOM FULL OF CRACK.
    3. Re:Just a few thoughts... by Bollie · · Score: 4, Insightful

      Palladium is a good idea, but not for desktop use. End-users are treated like criminals or people operating under secrecy.

      Palladium is more about (1) hardware enforced signing and (2) code verification.

      I'm all for signing and code verification. I check my package signatures with GPG before I install them and I MD5 all my .isos before I burn them. I use HTTPS (where the certificates get handed down via Verisign or some other root server).

      The problem lies with the fact that interoperability between Palladium and other systems is only guaranteed if you get a signature from a Microsoft-sponsored system. Guess which source is going to be trusted, no matter what? You're kidding yourself if Microsoft will allow you to "distrust" binaries or media coming from www.microsoft.com.

      This is the exact argument for DeCSS. You may be perfectly happy to own DVDs that can only be played on the "Enhanced Windows" system that Microsoft offers, but cannot be decrypted, EVER, on any other OS. Including Macs. (Depending on how much money they pay Microsoft for the right to play your media.

      They are going to release the source, which is odd in itself. It leads me to believe in general that MS may being a rather okay-ish thing.

      Releasing the source is not a sign of goodwill here. Since Microsoft already has the patent (look at point #7) on the core idea of Palladium it would mean diddly squat to the GPL community.

      My conclusion: Look at smart cards. They offer the same feature set. The only difference is that I'm gladly willing to give up the right to run software on the processor on the card in order to make things like bank transactions possible. The question is, are you willing to give up the right to run any software on your computer not expressly signed by MS, just so you can watch your favourite DVD on your PC?

    4. Re:Just a few thoughts... by cheezedawg · · Score: 2, Insightful

      Holy crap, what a breath of fresh air. Somebody who actually understands Palladium. Thank you for not blindly spouting off anti-microsoft rhetoric.

      I can tell you that DRM is not the main focus of the hardware side of Palladium. The hardware focuses on creating secure locations in memory that cannot be accessed by any unauthorized people (other processes, bus masters, bios). This means that applications can store things in memory (including the application code itself) without any worry about it being revealed or modified by malicious people (like procdump for example). Palladium is a solution to one of the big security holes in computer architecture.

      --
      "The defense of freedom requires the advance of freedom" - George W Bush
    5. Re:Just a few thoughts... by MrHat · · Score: 2, Insightful

      NO NO NO NO NO. Really. This is important. MS is not the final authority. The USER is, because the USER decides who will be a trusted authority.

      So, all this strong encryption and hardware-enforced execution policy, and we're back to square one. The user has to decide whether or not to run that e-mail attachment they just received. That doesn't quite sound like an 'initiative' to me.

      This 'initiative' doesn't formalize the software code signing or trust system - it's been there in Windows since 1998 or so. What it does do is force it into hardware so that everyone, including developers, are made to use it. And who does that help? System administrators can force trust on by themselves using system-wide policies, and most home users would switch it off (if they were allowed to) the moment it prevented them from running something.

      This is designed to tighten Microsoft's grip on software distribution channels. By requiring certificates for software developers (essentially a developer license), and colluding with hardware manufactures to only manufacture 'trusted' hardware, Microsoft is attempting to lock out non-commercial and free software.

      Broaden the definition of 'software' to include 'content', and we're all really fucked.

    6. Re:Just a few thoughts... by guanxi · · Score: 2

      " NO NO NO NO NO. Really. This is important. MS is not the final authority. The USER is, because the USER decides who will be a trusted authority. "

      Just like the user decides which web browser to use.

      Walk to the nearest downtown, pick the first person you see wearing a red shirt (to randomize selection), and try to explain encryption, security, and trusted authority to them.

      Can people make a decision about something they don't understand?

    7. Re:Just a few thoughts... by guanxi · · Score: 2

      It doesn't benefit MS to be the media police, and that's not what MS wants.

      Hmmm... why do you say that? It seem obvious to me that controlling media would be very profitable. Palladium puts enourmous power in Microsoft's hands. Being a highly competitive business with a long track record, why would you think they won't use it?

      It will give Microsoft enourmous control over what goes on a users computer. If you have to turn something off -- and how hard will that be? How many switches, registry entries, etc. will it take to disable IE -I mean, Palladium? -- to use other software or media, how many users will make the effort? When the warning appears, 'Windows is not compatible with DR-DOS' -oops, I mean 'Changing this setting will allow wierdo open source hackers to track your children online', what will users do?


      It is also worth noting that MS does not see Palladium as Windows only.

      But 95% of computers run Windows. How does this diminish the problem?

    8. Re:Just a few thoughts... by bnenning · · Score: 2
      MS is not the final authority. The USER is

      Really? Will the user be able to disable the Palladium hardware and software entirely if she wants to?

      Additionally, one of the things Palladium entails is the BSD'ian idea of a "jail"

      A good idea, and as BSD demonstrates, hardware is not needed to do this.

      --
      How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
    9. Re:Just a few thoughts... by Convergence · · Score: 2

      Palladium is unnecessary for that.

      My kernel on my [linux] machine is the final arbiter of who can and can't write what. If it says 'no' then no, no program can do anything bad.

      The kernel can also enforce code signing, disallow applications from accessing what they're not supposed to, etc etc etc.

      What the kernel cannot do is keep itself from being replaced. (Well, it partially can, by disallowing applications from writing to the spots on the disk where its stored.) As I run a secure OS, normal users cannot write to that part of the disk, and thus, the computer is secure.

      Again, there is no need for Palladium to have a computer you can trust, or to have a secure computer.

      What Palladium does is remove that control I have over my machine. With Palladium, software can choose, by itself, not to run, or the computer can refuse to boot unless I boot into a kernel of Microsoft's chosing. That is not necessary for protection against viruses or other malware. What it does do is give Microsoft absolute control over what kernel is booted, and thus over what is and is not allowed to run on my computer.

      With my current system (as I have root), the kernel is of my choosing. I have control. I have the security I wish. It runs or does not run programs for other users as I choose.

      With Palladium, it is not under my control. It is Microsoft's kernel. It allows and disallows access as *they* wish. They can order it to disable Morpheus, or cut off my access to my research data. THey may, now, give me choice as to what sources to trust and not trust, but it remains their kernel, their control, and they can change their wishes at any moment.. They first expect to use this control initially for DRM, but, as it remains their kernel, they can expand this as much as they wish.

      With my kernel, I ultimately control who and what is trusted, with no outsider to get in the way.

      With Palladium, Microsoft has ultimate control over who and what is trusted. They may delegate some to you, but they reatain ultimate control.

      They claim that allowing other people control over your computer is good for you by reversing this. IE, You can be delegated control over someone elses computer (for example, to restrict them from doing as they wish on their computer). However the same applies to you. Anyone or program who sends you a file can attach arbitrary control on that file to YOU. You may think this is a fair trade. I do not.

      And in any case, ultimate control rests with Microsoft.. Their software obeys them, not you.

    10. Re:Just a few thoughts... by johnos · · Score: 2

      The thought had crossed my mind that I was being too paranoid about this. That MS really was trying to do well and make money by trying to do the right thing. Because really, they are not evil and stupid people, despite our (my) prejudices.

      BUT, then came the change to the Media Player EULA. They want me to grant them admin rights over my computer. If they wanted to disable content so that I could not run it unauthorized, that would be one thing. But, that is not what they want. They explicitly want the right to change my software so that it complies with their views of what is right and proper.

      Sorry, but I view Palladium in light of these proven facts. Microsoft is a monopolist. Microsoft deliberately used illegal acts to maintain that monopoly. Microsoft has not admitted any wrongdoing. Microsoft has made no promise to change anything except with regard to the narrow markets where it feels the court's judgements should apply.

      So given all that, there is no rational basis to assume Palladium is anything but what it appears to be. A "final solution" by MS to the problem of markets and competition. There will be no markets, there will be no competition. Microsoft will decide what products we use, when we use them and what we will use them for. They will decide what we pay, when and what for.

      The thing is that Microsoft believes that what they are doing is good and right. They believe that they have the best interests of everyone at heart. They believe that their success comes from virtue. And that therefore, everyone that opposes them is evil, venal, corrupt, dishonest or stupid.

      So despite the inherent wisdom of your approach to the subject, I cannot agree with you. I do not want Palladium, or any other Microsoft security scheme within ten miles of my computers.

    11. Re:Just a few thoughts... by Darby · · Score: 2

      we already have DRM that is very secure-ish.

      No we don't. not at all.

      Despite the occasional hacks, the various media players out there don't let you violate what the content publisher wants.

      The media player has nothing to do with the issue.
      They just play the file. Doing other things with the file is the job of the hardware, the OS, or other programs.

      Second, MS isn't accusing anyone of being media pirates. Palladium isn't about MS being the media police. It doesn't benefit MS to be the media police, and that's not what MS wants.

      They are explicitly accusing *everybody* of being media pirates. The only reason for even considering DRM is the assumption that people are thieves. There is no other justification.
      Being the media police is what MS wants more than almost anything. Palladium was designed specifically for this purpose. The other supposed uses were thought up later, after the design was well underway. This was stated by the designers.
      There is obviously a huge benefit to MS to be the media police. If the publishers only release their content in MS's format, then they extend their monopoly.

      It means if you buy or purchase "secure" content, you'll have to abide by what the publisher wants (which we already have to do!)

      We most certainly do *not* have to abide by what the publisher wants. I can re sell a book I purchase when I've finished reading it. The publisher does not want this. They are forbidden both by law and by the realities of the situation to do anything about it. DRM is designed for the express purpose of enforcing what the publisher wants at the expense of free exercise of fair use rights.

      With hardware enforced security, MS *could* use it to take complete control over your PC - allowing only MS tested and approved code. But that doesn't benefit them, and so, it won't ever happen.

      Most likely, this extreme won't happen, but your argument is totally misleading. If they do it even once to one product from one publisher then it is not worth having. They have proven repeatedly that they are willing and eager to do exactly this.

      # most common forms of trojans and backdoors will be effectively eliminated - assuming people don't set the PC to "trust all" sources

      The stupidity of this goes without additional comment.

      You are entirely wrong about the focus of Palladium.

      You clearly have no fucking clue whatsoever about it given your ignorance of the stated goals of the designers themselves.

    12. Re:Just a few thoughts... by Dreamweaver · · Score: 2

      Ah, complicated like trusting webpages complicated?

      I don't know how many times a day I get popups to trust Gator Spyware Inc. or whomever. I know well enough to hit No, but there's a big fat OK button there, and even a friendly little "Always trust content from Evil Advertising Ltd." checkbox.

      I'm sure people do pause the first time they get one, but the warning text is in little black type and the "CLICK HERE TO GET FREE CARS!" bit is in stand-out-ish blue type. Where do you think Joe User is looking when he hits OK? MS seems to feel that this is sufficient warning before trusting someone at a random webpage to initiate a download and then run the downloaded software with no more interference from you, the user, so how much more complex do you expect them to make running programs actually On your computer?

      I would be not at all surprised if the first time someone runs an untrusted application they get a friendly little paperclip in a police uniform asking if they always want to trust content from this source.

      --


      "If a man hasn't discovered something he will die for, he isn't fit to live" -- MLK, Jr.
    13. Re:Just a few thoughts... by cheezedawg · · Score: 2, Funny

      You have a basic misunderstanding of the technology. The hardware support is not dependant on Microsoft in any way. The standards will be published and available for any os designer. If the software does not use the security features in hardware, they are simply not used. It in no way dictates what os you can run on a pc.

      There are many attacks that are impossible for an os to guard against. What if a bus master is trying to access "secure" memory? The os has no control over that access and can do nothing to prevent it. Hardware support is needed.

      Time will tell how Microsoft implements it. If they decide to place more limits on what you can do then don't buy the software (you probably don't buy any Microsoft software now anyway). If enough people don't like it, Microsoft will give alternatives. Bottom line is that they are going to do what they think will sell the most software. I personally agree with danheskett- Microsoft is probably not going to implement your worst case scenario because it is not in their best interest.

      --
      "The defense of freedom requires the advance of freedom" - George W Bush
    14. Re:Just a few thoughts... by Convergence · · Score: 2

      Its my computer, if I don't trust a device with bus-master trying to access my memory, I remove the device, for the same reason I don't keep dangerous chemicals in my apartment. Its unsafe.

      Anyone who has physical access to your computer can fuck you over, there's no way to stop that.

      Anyways, read the patent. The purpose is to detect if you're running hardware not of their choosing, or an OS not of their choosing, and to cause programs to fail if you do.

      For example, put an old SB-Live sound card in, and the windows media player doesn't run.

      Correct, Microsoft will do whats in *THEIR* best interests. However, their best interests are not MY best interests. Read the patent.

    15. Re:Just a few thoughts... by mgv · · Score: 2

      most common forms of trojans and backdoors will be effectively eliminated - assuming people don't set the PC to "trust all" sources

      If we already have effective DRM's (which I agree we largely do) then we could also have largely secure PC's (which we do).

      Exactly how do you think that this will stop trojans when the solution to this never needed a hardware component? Effective OS security (don't even need Linux for this, can be done in windows) prevents trojans.

      So why will good hardware protection add to this when people will still run everything as an administrator, mostly with a blank password, and click on the install button when asked anyway?

      Palladium is not the (best) solution to viruses, and only a fool would think that this is its real purpose. Having user and admin accounts works alot better for this.

      Michael

      --
      There is no cryptographic solution to the problem where the intended receiver and the attacker are the same entity.
    16. Re:Just a few thoughts... by guanxi · · Score: 2

      It's clear to *me*, but my point is, most end users will never understand what it means. Most end users (and I deal with a lot every day) don't use 'right-click', and can't describe the difference between RAM and their hard drive.

      Let's look at the example messages:

      Big red box. Flashing colors. "THIS CODE COMES FROM AN UNTRUSTED SOURCE. THERE IS NO DIGITAL SIGNATURE THAT CAN BE VERIFIED. IT IS RECOMMENDED THAT YOU RUN THIS PROGRAM IN A UNTRUSTED MODE TO CONFIRM THAT IT DOES NO HARM TO YOUR SYSTEM. CONTINUE RUNNING THIS PROGRAM AS UNTRUSTED?" (yes/no/help).

      That works for me, but end users will see:

      Big red box. Flashing colors. "THIS blah COMES FROM AN blah blah. THERE IS NO blah blah THAT CAN BE blah. IT IS RECOMMENDED THAT YOU RUN THIS PROGRAM IN A blah blah TO CONFIRM THAT IT DOES NO HARM TO YOUR SYSTEM. CONTINUE RUNNING THIS PROGRAM AS blah?" (yes/no/help).

      Or if I substituted words in Chinese for the technical terms, how would you answer? Red, flashing, "untrusted" and "harm" they'll understand. Continue? No way. My other point is, it's not hard to manipulate those who don't understand. If you presented the same messages using green, and the words 'trusted' and 'safe', you'd get a different answer.

    17. Re:Just a few thoughts... by guanxi · · Score: 2

      The root authorities you select ...

      My point is, 99% of end users are going to accept the root authority they're given, having absolutely no idea what a 'root authority' is. How many users even switch web browsers, something better understood than root authorities? How many even change their home page from msn.com?

      And in case any end user gets the idea they want to change root authorities, it's easy to discourage them:
      * Make the procedure obscure and difficult (like removing IE)
      * Display 'cautionary' messages; e.g. 'Microsoft can only guarantee Microsoft-approved root authorities as trusted and compatible with Microsoft software. Are you sure you want to continue?'


      Ultimately this puts an incredible amount of control back to the users.

      Only expert users. And only for now -- three words for you: Embrace, extend, extinguish. Wanna hug?

    18. Re:Just a few thoughts... by Darby · · Score: 2

      Okay, lets get drop the gloves then, shall we?

      Ummm.... whatever, dude. I think you need a nap, or maybe some chill pills.

      That being said you pompus jack ass, until Congress gets around to creating affirmative rights of fair use, you do have to abide by what the publisher forces on you.

      Ignoring the unprovoked flame, the simple fact is that we do not have to abide by shit. They can put anything they want in the EULA, but until it is tested in the courts it is worth nothing. You might feel that it is your duty as a good little consumer to obey whatever you are told by the big media companies, but as a citizen, I feel no such compulsion.

      Luckily the courts have protected us against certain content companies attempt to restrict fair use (first sale rights, for example). Until that is extended to digital media, we are screwed and kept under oppressive DRM and EULAs.

      No, until first sale rights are specifically *removed* from digital media by an act of congress (or more likely a constitutional ammendment would be required) we have these rights.

      Got it? Thats the way it is.

      Go ahead and be a good little slave if you want, but that is not the way it is for anyone with any self respect.

      If MS wanted, they could force a piece of code into Windwos that would only allow MS approved software to run. Okay? Can we agree on that? That could happen TODAY. Without Palladium, this is possible TODAY. TODAY. RIGHT NOW. MS could issue a patch to Windows that would check binaries sums in realtime againt MS servers. Its a no-brainer, could be done in a matter of a few hours. But they havent.

      Sure they have. Several times they have been convicted of it in court. Not for all non MS products, just certain ones. Had you bothered to actually read and comprehend the part of my post you quoted, you would have seen where I agreed that it most likely would not happen to this extreme. It ever happenning at all is bad enough though.

      Third parties, selling all manner of applications, drive MS sales. If you realized this, we wouldn't have this patethically lame conversation, jackass.

      Obviously this is true, but as soon as someone tries to make a product that will cut into MS's slice of the pie, or MS wants to get into a new slice then they have no incentive to allow the competitors product to run on their OS. They have been convicted of breaking other products in this situation. They will do this again. This is a simple fact.

      Just because they designed it for DRM doesnt mean they designed it to be the media police. MS obviously wants hollywood to get in bed with Windows because it would drive more sales (people want digital content on their machines! and are willing to pay for it! imagine that!)

      If you would actually use your brain for thinking rather than spewing unoriginal flames, you would realise that these two sentences directly contradict each other. *Hollywood will only get into bed with the media police.* MS wants to get into bed with Hollywood. Hence MS wants to be the media police. It is that simple. MS has been working on their DRM agenda for a long time now. None of their customers have ever asked for something that would restrict their rights to use files on their computer.

      Everyone here, including your own retarded self, things that his means that in doing so unsigned code and content won't run. And thats just pure fucking fantasy. Its a little wet dream you made up to be able say that MS is evil, but taking away our MP3s.

      Wow. It must really suck to be so full of bile.
      Perhaps you could point out where I mentioned anything even related to this? I'm so retarded that I can't seem to find that anywhere in my post.

      Thats because that little lie was just fabricaetd to fuel your hate.

      Since I never said such a thing, and the things I did say were said in a calm logical manner, I think it is clear who is fueling their hatred with lies. I hope that when you grow up you are able to overcome your blind hatred. Your life will be much better if you can.

    19. Re:Just a few thoughts... by cheezedawg · · Score: 2

      Its my computer, if I don't trust a device with bus-master trying to access my memory, I remove the device

      I'm glad you keep such close tabs on your PCI traffic. How much did that bus analyzer cost you, anyway?

      This example was obviously quite extreme, but it just shows that hardware support is needed to guard against some attacks.

      Correct, Microsoft will do whats in *THEIR* best interests.

      Its in Microsoft's best interest to keep customers happy so they continue to buy software. Pissing off users by not letting them do what they want to do or not letting them use the hardware that they want to use will probably reduce their revenue, so I just don't see them doing it.

      --
      "The defense of freedom requires the advance of freedom" - George W Bush
  5. Re:No Worries by Midnight+Thunder · · Score: 4, Insightful
    I can say monopoly, but I can also say sheep. While people don't understand what is being taken away, they'll flock to the OS if Joe Bob down the road says that the OS has cool feature X. The sad truth is if you put some a cool billion dollars worth of money at the bottom of a cliff and tell some people they'll get it, and maybe fame, if they jump, some people will - the promise of reward over-rules sensible thought. This is a generalisation, but you should get the idea.

    I'll stop worrying the day that my relatives who don't understand the difference between a CD and a hard-disk, understand at least this.

    --
    Jumpstart the tartan drive.
  6. Palladium... Isn't it the thing RIAA asked for ? by Vapula · · Score: 3, Interesting

    DRM, authorized application and OS... Isn't it the thing Senator Disney Holling has been trying to put as a law ?

    This is something that both Microsoft, in his fight against OpenSource and RIAA/MPAA in their fight to restrict rights of consumers want...

    But there are two ways it can be implemented : mandatory or optionnal.

    Mandatory means that if the OS don't authenticate, it's access to some of the hardware would be limited. That could prevent OS like linux to run.

    Optionnal means that it would be possible for the OS to authenticate with the chip and then, to get access to some cryptographic system that can be used when dealing with DRM-specific content but otherwise don't interfer with the OS.

    With many (and more coming) big companies and governments betting on Linux, we can hope that it'd be optionnal... Allowing it to be mandatory would be suicidal for all those relying on Linux (like Disney, IBM, HP, ...)

    Future will tell us... But Palladium is a dangerous bet for Microsoft as, in the beginning, there will be both Palladium-enabled and Palladium-free systems available... and with more and more people switching from Microsoft to Linux, these Palladium machines could remain unsold and Palladium could sign the end of Microsoft in OS market...

  7. Free market by Tune · · Score: 3, Insightful

    > The current unencumbered hardware isn't going to go away unless people stop buying it, or a law is made against it.

    Both are more likely than you might think. Never forget that free market models are only applicable to free markets: Consumers do not have a free choice in an almost completely monopolized market. That is: I agree that nothing's lost until people actually start buying and using these Palladium based technologies, but what people buy or what people use is to very large extent a result of marketing. And - as we all know - Microsoft has a lot of resources to do "good" marketing...

  8. Hmm by nebby · · Score: 2, Insightful

    Situation A: Lonely midnight pasty white hacker codes up easy to use, secure, encryption software for the common user. This is something which can be used for good or evil, but should nonetheless be available for everyone to use. He publishes the code so people can ensure that there's nothing going on behind the scenes. He is praised on high and given verbal rimjobs by the "community."

    Situation B: Same as A, except the hacker is now Microsoft. They are slammed, accused, and drilled by the "community," the only real difference being that their code will not be modifyable for distribution while the hacker above's will be. (They're releasing it under shared source remember.)

    Shit, click on any crypto article and you will have people whining about how there is no easy to use, open source crypto software installed on everyone's computer. Now we're getting it by the only company who could actually get it on every computer, and you bitch and whine because of one facet of the implementation, DRM, which is inevitable and would happen regardless of who developed the cryptosystem. You either get crypto on every computer, and DRM, or no crypto and no DRM, you can't have one and not the other. Deal with it.

    So finally, I can actually send a secret to Grandma via e-mail without anyone being able to snoop in on it. But sure, you can skip over mentioning that part (something rather incredible given it's been 30 years since RSA) because it obviously takes too much effort to actually boycott the RIAA or stop pirating music in order to get them to respect your "fair use" rights. String up Microsoft instead, right?

    I'd have issues with it if we wouldn't be able to see the source code, but we will be able to. It doesn't matter that it's not GPLed in this situation.. if there is a bug you can be sure MS will fix it ASAP since their ass is riding on this software. This is not IE.

    Also, if you end up not being able to install Linux on your computer because of the hardware, either blame yourself for buying the hardware knowing that Linux was not up to speed yet, or blame the Linux hackers for not supporting your hardware. Don't blame MS for getting crypto in every home -- that's been a something that everyone who knows anything has wanted since the 70's. Don't kid yourself -- without MS doing it, it would never happen.

    --
    --
    1. Re:Hmm by heikkile · · Score: 3, Insightful
      You either get crypto on every computer, and DRM, or no crypto and no DRM, you can't have one and not the other

      Pray tell why not? Crypto allows me to hide, sign,and verify things; DRM forces me to do these things and prevents me from doing all kind of things with data, possibly my own data.

      As to seeing a source code, I doubt it. Sure M$ may show some "trusted" parts some source, but what guarantees can I ever have that it is the same source as what is running on my box? The problem with DRM is, as most of our readers know, that it is incomaptible with my ability to write any programs I want, and run them on my computer. That is why I whine against DRM, and will do my little best to stop such horror from happening.

      --

      In Murphy We Turst

    2. Re:Hmm by ttyRazor · · Score: 2

      No, I'll blame microsoft for forcing ALL hardware to no longer function in linux, not because of some harmless incompatibility nobody's figured out yet but because it won't let me run my disk accessing binary without a paid-for certificate from them.

      Oh, and when has Microsoft ever got something bug free because their ass was riding on it? I'd say stuff like Windows Product Activation falls into that, and see how effective that was?

    3. Re:Hmm by DickBreath · · Score: 2

      Situation A: Lonely midnight pasty white hacker codes up easy to use, secure, encryption software for the common user. This is something which can be used for good or evil, but should nonetheless be available for everyone to use. He publishes the code so people can ensure that there's nothing going on behind the scenes. He is praised on high and given verbal rimjobs by the "community."

      Situation B: Same as A, except the hacker is now Microsoft. They are slammed, accused, and drilled by the "community,


      This is not a fair comparison. We are not talking about someone coding up a piece of encryption software. If that were the case, there would be no fuss. Simply don't run the software you don't like or hack it. (Note this is presently the case with all MS software today. Just say no.)

      We are talking about control of the hardware with the specific objective of preventing anyone from coding software. This is designed specifically to prevent any kind of unapproved software from the boot loader up through the OS and on to the applications and media players. Niether you nor anyone else would have control of your hardware anymore. You could probably write software, but only with the permission of those who control your hardware.

      --

      I'll see your senator, and I'll raise you two judges.
    4. Re:Hmm by FuzzyDaddy · · Score: 2, Informative
      Yes it does matter if it's GPL'd.

      Remember Microsoft's "opening" of the SMB protocol? The license agreement stated it could not be incorporated with any code that used the GPL or similar license.

      So they can very well open up the source code, but not allow it to be used in any GPL'd system.

      --
      It's not wasting time, I'm educating myself.
  9. MS designed for by nuggz · · Score: 3, Interesting

    MS can just make it a precondition to using the designed for MS Windows XP or whatever the next version is.

    If the only way to get MS signed drivers for your hardware is to implement Palladium, they will likely do it.

  10. Periodic upgrades? by Matey-O · · Score: 2

    There are three types of person:
    a) us Geeks which upgrade at the drop of a hat (A GREEN LED instead of a RED one? Ooo, where's my Visa)
    b)The folks that buy the multi Ghz serverclass workstation to play solitaire and reproduce the words 'You've got mail!'..and typically buy one computer per decade,
    b) and my Mom...who's been living happily on my handmedowns for years. While I'm running a Ghz Athlon with GeForce graphics, she was happy with the PII 300 and the P1 120 before it.

    At least from an end user (I'm ignoring business pc's for the moment) only 'a' above drives upgrade cycles.

    Be honest, how many IT folk have you encountered whos primary computer is, like, five years old? The number is disturbingly high.

    --
    "Draco dormiens nunquam titillandus."
    1. Re:Periodic upgrades? by danro · · Score: 2

      Be honest, how many IT folk have you encountered whos primary computer is, like, five years old? The number is disturbingly high.

      I am a professional programmer.
      My primary box (well, at least the mb and CPU, everything else has been replaced at least once...) is pushing on 4 years right now.
      Still works ok for anything I usually run on it. Both on W2K and Linux. With the exception of modern games, of course.

      I recently thought of upgrading, but decided on a big-ass TFT as my next buy instead.
      I simply need it more than one or two extra GHz.

      If I should need more powerful hardware, I bring a laptop home from work...

      --

      "First lesson," Jon said. "Stick them with the pointy end."
  11. I might be wrong here, by ejaw5 · · Score: 2, Interesting

    but how much would Palladium affect developers (non-commercial, home-brewed programs)? I mean, under this system, only "digitally signed software" would be allowed to run. How would someone go about certifying their own program?, because if someone could do this, it defeats the whole purpose of Pallidum. So maybe VB Pallidum edition would certify your own code, but in the meanwhile would also certify the code of virus writers too. How about if someone writes a program in (C/C++/Perl/etc) on a (*nix/mac/sun/etc) and try to run it on a Windows Pallidum system?

    --

    $cat /dev/random > Sig
    1. Re:I might be wrong here, by Jeremi · · Score: 2
      How would someone go about certifying their own program?, because if someone could do this, it defeats the whole purpose of Pallidum.

      You're right. Palladium is an attempt to divide the world into two classes of people -- those who are "trusted" to write executable code (i.e. big companies who pay Microsoft lots of money), and those who are not (plebians, users, and small developers). I, for one, am not looking forward to second-class-citizenship based on my refusal to pay Microsoft lots of money for the right to write code.

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    2. Re:I might be wrong here, by UncleFluffy · · Score: 2

      So what do you do with your new selfcompiled but unsigned binary?

      Couldn't you just sign it yourself and set your box to accept stuff that you've signed ?

      --

      What would Lemmy do?

  12. It'll be good and bad... by weave · · Score: 4, Interesting
    My prediction. This will be a boon for workplace computers. The home market will reject it.

    IT has been itching to seize control over the desktop ever since those rouge PCs yanked control from the terminal/mainframe days. This OS will help that greatly. Say goodbye to Personal in PC.

    The home user will most likely reject it. We think about gramps with a computer, who doesn't care, but in almost all family situations, there's a younger and computer literate geek who is called whenever there is a computer problem. Most of them love Microsoft now (look at the flame wars here for examples). Removing Personal from PC at home just ain't going to fly. People will reject it and if future hardware enforces it, the hardware market will take a huge negative hit for years while people hold on to legacy computers until they all die out. For advanced gaming, we'll just buy consoles. For our home box tinkering needs, we'll hold on to our trusty current boxes...

    1. Re:It'll be good and bad... by GigsVT · · Score: 2

      You don't need palladium to do this, just set up a terminal server (Windows or Linux) and lean clients of some sort. I avoid the term thin clients because you can put as much or as little on them as you want to. Everything is optional except power supply, RAM, PXE compliant motherboard and processor. (And monitor/KB/Mouse)

      I've done this myself at home with several totally diskless nodes for a OpenMosix beowulf cluster, and it works fine. Why would you want crippled systems when you can do it with the technology that exists today?

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  13. Palladium = Passport v 2.0? by Matey-O · · Score: 3, Insightful

    Does anybody think this is just a reglossing of the personalization stuff in Passport that didn't fly?

    They made a big deal of grabbing and getting control over your personal information and when that went over like a fart in Church they backpedaled and thought:

    "Well, will they accept it if we word it _this_ way?"

    --
    "Draco dormiens nunquam titillandus."
  14. Irony... by cperciva · · Score: 2, Offtopic

    When I opened up an article which discussed, among other things, inkjet printer cartridges which were designed to fail if they were refilled, I found a popup ad telling me that I could save 80% off my inkjet cartridges by refilling them.

  15. Paranoia vs Freedom by dowobeha · · Score: 5, Insightful

    I don't like Microsoft. Let me get that out of the way right now. I consider the company to be a shining example of some of the worst aspects of capitalism.

    But Microsoft isn't what worries me. Microsoft does not make me paranoid. Why? Because I know that no matter what happens with Microsoft, I can always choose not to use their products. I can buy or build myself a perfectly usable computer that runs Mac OS X, Linux, or what have you, and is certified 100% MS-free.

    What worries me is the spectre of DRM laws mandating how my computer works and what types of programs I may and my not write.

    I am concerned about any program, any piece of hardware, any treaty, any law that treats me as a consumer, not a citizen.

    I worry that someday, when I sit down to code away on my digital photo managment software that I will have to incorporate government-mandated checks to ensure that no one could possibly use my product in any illegal activity.

    As I sit here in England, people are celebrating Independence Day back home in the U.S. I will be later today, too. I'm proud to be an American; I'm proud of the freedoms that I enjoy under the U.S. Constitution. But I am paranoid that many of the basic freedoms that I have always counted on are being swept silently away - in the name of big corporations, in the name of security, in the name of profit.

    Security is a great thing, but not at the expense of freedom of speech. Companies and artists need freedom from theft, but not at the expense of law-abiding people. We already have laws for punishing thieves and crackers. Use those laws.

    ------

    Just because you're paranoid doesn't mean they're not out to get you.

    --
    I am concerned about any program, any piece of hardware, any treaty, any law that treats me as a consumer, not a citizen
  16. Comment removed by account_deleted · · Score: 3, Interesting

    Comment removed based on user account deletion

  17. much more informative articles by Ristretto · · Score: 3, Informative

    Here's where the story was first reported in the mainstream press, with far more information, analysis, and interviews: Newsweek article by Stephen Levy. You might also want to read Microsoft's own take on this initiative.

    1. Re:much more informative articles by 0xdeadbeef · · Score: 5, Interesting
      I went looking for less-cheerleading press on this, encountered this gem:

      Microsoft Tackles Cyber-Security.

      Notice the highlighed quote:
      "If [Paladium] works, it will be the first time in the history of computing that [this level of security is obtained.]"
      Bruce Schneier
      Cryptography expert
      Ooh, a bold new step for Microsoft, a bold new step for mankind! Now read his actual statement, included in the same article:
      "If this works, it will be the first time in the history of computing that it works," said Bruce Schneier, a cryptography expert and author of "Secrets & Lies, Digital Security in a Networked World."

      "Lots and lots of encryption is broken all the time because it's done wrong," Schneier said. "The odds are actually zero this will be secure."
      Now can anyone claim that the press isn't trying to spin this?
    2. Re:much more informative articles by plumby · · Score: 2

      How likely are you to get an unbiased report about Microsoft on MSNBC? What do you think the MS stands for?

    3. Re:much more informative articles by marxmarv · · Score: 2
      Now can anyone claim that the press isn't trying to spin this?
      It's Sony. What do you expect from them?

      -jhp

      --
      /. -- the Free Republic of technology.
    4. Re:much more informative articles by guttentag · · Score: 2
      This isn't a CBS article. Television news reporters don't go far enough in-depth on a story to understand something like Palladium, so they don't try -- they use the Associated Press.

      The article was written by Ted Bridis (whose coverage of Microsoft has been around for a while but I've often been unimpressed by his articles -- sometimes I think he just paraphrases MS's press releases) who works for the Associated Press.

      While CBS may have an incentive to spin DRM (it's owned by media giant Viacom, which also owns Blockbuster and MTV, IIRC), the AP does not. Note the headline change the wire editors made:

      Mon., June 24
      Microsoft discloses ambitious new security effort

      Tues., June 25
      Microsoft Discloses Security Project

      They took the fanfare down a notch.
  18. Could Be More Convincing by Anonymous Coward · · Score: 2, Interesting

    The important thing to understand about Palladium is that it doesn't improve security for the end user. I can control what software runs on my machine right now, and I can refuse to run incoming code that isn't signed by a trusted party. Pallidum's sole purpose is to give IP owners control my computer, because as long as I have control over my computer then digital rights management is a paper tiger.

    If there is hardware that refuses to run without the right signature, then there is no way for me to install anything that bypasses digital rights management. The fact that Linux will certainly not have the right signature is just a happy byproduct of the fact that I can't develop or install certain kinds of software.

    This kind of technology makes me shudder.

    1. Re:Could Be More Convincing by mpe · · Score: 3

      The important thing to understand about Palladium is that it doesn't improve security for the end user.

      Or indeed anyone other than the corporate publishers who are making noises about DRM. If anything it could make things less secure. Because tools to improve security might not be giving the blessing of these people...

      Pallidum's sole purpose is to give IP owners control my computer

      No it's about protecting the IP of a tiny minority of IP owners. Like most other DRM ideas, it won't do anything to protect the IP you or the other several billion (probably arround 10 billion if you include corporates) IP owners might happen to own.

  19. Non-Geek Computer Users by Te1waz · · Score: 3, Interesting

    Computers have yet to penetrate really deeply into the average consumers home.

    This type of User doesn't generally create anything really complicated with their computers, they'll hardly even notice the difference between Palladium PCs and Unrestricted Computers.

    As long as they have Web, E-mail, Word-processor, something to do Invite cards to parties and work with Digital cameras etc. they'll be perfectly happy.

    They will not understand the nerdy minorities issues, and certainly won't raise a fuss as we're carted off screaming by the authorities when we're all branded unmutual or something.

    It'll only be the next generation (or the next after that) who realise that their capacity to innovate and progress humanity has been curtailed.

    --
    From my Autobiography - "Lifestyles of the Sad and Desperate"...
    1. Re:Non-Geek Computer Users by dmarx · · Score: 2, Interesting
      As long as they have Web, E-mail, Word-processor, something to do Invite cards to parties and work with Digital cameras etc. they'll be perfectly happy.

      Actually, I think they will notice that they can no longer trade MP3s.

      --
      "Do I dare disturb the universe?"
  20. Re:The real base of the problem by ttyRazor · · Score: 2

    From the sound of this the chips will hardly be useful for quite a while, when even hopelessly old machines have it. There needs to be a critical mass of hardware for content providers to release anything, since nobody is going to run out and replace all their PCs which do nothing different except allow you to play stuff in MS' file formats that they charge you for. For the first few years it won't even matter that its there, none of the detrimental effects everyone here predicts will happen since nobody's using it. THEN they'll turn it on full blast when the only place you can find a machine without it is smoldering in a chinese PC recycling center.

  21. *cough* by 0xdeadbeef · · Score: 2


    MS to eradicate GPL, hence Linux


    Palladium will essentially prevent you from rebuilding your kernel. It won't stop you from compiling it, but it will make your computer "untrusted", and therefore prevent you from running any program or accessing any DRM-encrypted file that requires the facilities that the "Fritz" chip will provide.

    1. Re:*cough* by mgv · · Score: 2

      Palladium will essentially prevent you from rebuilding your kernel. It won't stop you from compiling it, but it will make your computer "untrusted", and therefore prevent you from running any program or accessing any DRM-encrypted file that requires the facilities that the "Fritz" chip will provide.

      See the problem? European MP3 player is "untrusted" but works anyway. US MP3 player only works on palladium system.

      US consumer can use European player in "untrusted" mode, or US player (which is trusted but doesn't play as much stuff). Most computers run in untrusted modes to support legacy apps (like apache, open office, etc).

      US software writer can't make trusted software for rest of world, but rest of world can make untrusted software for US.

      My interpretation: Microsoft cares little about digital rights, but benefits alot from the current support from recording industry. Unless implemented worldwide, which is unlikely.

      Note also - how many people buy multizone DVD players?

      Michael

      --
      There is no cryptographic solution to the problem where the intended receiver and the attacker are the same entity.
  22. Comment removed by account_deleted · · Score: 4, Interesting

    Comment removed based on user account deletion

  23. Re:The real base of the problem by SirSlud · · Score: 2

    > That's why you vote with your dollar and don't give in to the temptation to purchase products from companies who you don't want to "rule" the market.

    The point he was trying to make is that consumers dont have the luxury to do this. We might think, as individuals we do, but by virtue of existing monopolies (and the fact that they have sprung up in numerous forms over the past 500 years) shows that it is not a viable solution to tell people not to participate in a market where the only viable choices are choices they do not wish to make.

    Too often the consumer is forced to pick the lesser of evils instead of the best of breed. That, I think, is what bothers many people.

    The alternative to free markets (capitalism), and state-controlled markets (communism) was proposed by an economist called Polyani, post WWII (I think.) He proposed, much like the checks and balances in government, groups of producers and consumers haggling over pricing until both producers and consumers were happy. Thus, no product could be sold until the consumers (now as powerful as the collective powers of producers by virtue of this process, where the might of collective teamwork is finally an advantage consumers can have too) had agreed on what price the market will bear. Everyone pays the same price, and you dont get the phenomenon we have now, where MS extorts higher and higher prices out of fewer and fewer people, but effectively allows them to keep controlling the market by the sheer ubiquity of their product. Remember when MS offered to give away software to schools?

    Sure, I can vote by not purchasing something, but as it stands, as individuals, we have difficulty amassing and and using our collective might in the market, while companies have the advantage of making money from working as a team.

    This is why, historically, the 'supply' end of the market has been disproportionately more powerful and more prone to natural monopolies in markets where the product is a second-tier need (not air, water food, but telephone, publishing (art and culture), PC and OS, etc) rather than a luxury.

    --
    "Old man yells at systemd"
  24. Microsoft is Trolling by weave · · Score: 3, Interesting
    One reason for them to throw this out is to watch public reaction. They care a lot about profit, and judging from past history, they will back off to the point where they can balance what they want with what the customer will accept while maximizing their profit.

    Kind of like any economic graph measuring the elasticity of a product's price. You need to find the sweet spot between achieving your ultimate end goals and what the customer will tolerate before moving to a competitor.

    So even if you love Microsoft, your best bet is to publically rally against this thing. When Microsoft sees the public backlash, they will come back with a slightly gentler version.

    But make no mistake about it, eventually, it will happen, and they have the market dominance, funds, and patience, to eventually ram it through the market... My very first boss told me that the best way to affect change in a company is to make small baby steps instead of one big giant step. People won't notice it if you change a little at a time. But if you do it a bit at a time, you'll catch them sleeping and by the time they realize the cumulative effect of all the mini changes, it will be too late.

  25. Re:The real base of the problem by pubjames · · Score: 2

    Oh yea, and i suppose the government controlling everything is better than Microsoft controlling everything. Thanks, but i'd rather have Microsoft controlling everything.

    Oh yes, I can see it now:

    UNITED STATES OF MICROSOFT AMERICAN(tm) - CITIZENSHIP AGREEMENT

    By residing in the United States of Microsoft America(tm) you hereby agree:

    a) to pay one half of your earnings to Microsoft Government(tm) on a monthly basis, for all the great services that they provide.

    b) Microsoft Government(tm) will not be held responsible should you injured, die, be made bankcrupt, or suffer any other type of misfortune as a result of the actions, or inaction of Microsoft Government(tm).

    c) Should the United States of Microsoft America(tm) suffer any security breach by a terrorist or another country during times of war, Microsoft(tm) will not be held responsible for any resulting loss of life or property.

    d) Anyone publicising any failure, negligence or other fault of the Microsoft Government (tm) will have their Microsoft Citizenship(tm) immediately revoked.

    f) etc. etc.

  26. Hoax, surely? by MartinB · · Score: 2

    Hm. Not on cnn.com, nor on news.bbc.co.uk, abcnews.com or foxnews.com, including streams (live IIRC) for cnn, abc and bbc.

    Hoax, I think. Mod me down for being offtopic - happy to lose karma for exposing it.

    --

    The only thing you can accurately describe as "Scotch" is a sticky tape made by 3M. And it's

  27. Democratic Vs. Authoritarian encryption schemes. by vkg · · Score: 2

    This is all about restricting your right to choose what you want to do: do you think for one moment that Palladium-disabled computers will:

    1> Run Linux?
    2> Run Gnutella?
    3> Run Freenet?

    Suppose that some form of software gets up the Government's nose, say GPG. Pull the certificates for that software, and *boof*, it's gone.

    This application fully embraces the centralizing possibilities of public key encryption: control flows up to the top of the pyramid, just like X509 certificates have a chain of authority: validity is drawn from authority. For X509, the Head Honcho is Verisign, and we know how responsible and responsive they are.

    The other possibility is GPG's trust model, or SPKI, which embrace bottom-up authority and allow you to pick who you trust: we already have code signing for many applications - MD5 checksums PGP-signed by the authors of the software, common for GPG distributions and many other things.

    It's not about the basic technology, but about who is in charge of it.

  28. The issue here is by Scratch-O-Matic · · Score: 5, Insightful

    being FORCED to use it. Your argument reminds me of Stalman's contention that all software should be free/open. How can you be an advocate of freedom if you maintain that nobody should release closed-source software (are they not free to do so?) Similarly, while crypto and security are good, the idea that any particular implemenation of same will be hardwired into your hardware, only to work with software that uses the same implentation, is a little distasteful.

    Now, of course, you will say that we aren't being FORCED to use palladium. Well, that's the problem with Microsoft. Their crap becomes the defacto standard that everybody else follows, for better or worse. Alternatives tend to shrink or disappear over time. Most people here on the dot probably like PGP/GPG. But if Microsoft incororated those into Office and said you could only share documents with people who also had it installed, and had the proper keys (given to you by Microsoft, after you 'signed' a EULA,) then you'd hear the same complaints. And those complaints would be legitimate.

    --


    Evil is the money of root.
    1. Re:The issue here is by morcheeba · · Score: 2

      Actually, that's not the issue. The issue is who owns the keys.

      In the the first case, the user has control of the crypto keys and uses it to determine what data to accept into his or her computer, use it to make sure outgoing data securely makes it to its intended destination.

      In the second case, the keys are held by the manufacturer of the hardware and the operating system. They determine how a user's computer can be used.

      Being forced to use encryption/authentication is not a problem at all; just as long as I can control what things I think are acceptable. I use linux and my files have different levels of access - user, group, superuser - but, as long as I have root on my computer (and no one else does), file access restrictions are a security great benefit to me.

    2. Re:The issue here is by DickBreath · · Score: 3, Insightful
      The issue is who owns the keys.

      Very interesting. This got me to thinking.

      Suppose you owned the signing key for your own hardware. That is each computer came with a piece of paper (or some machine readable token) containing the signing key in order to run software on that computer.

      Now it would be you who controlled what software can run on your computer. Whenever you want to run some code, you must sign it. Want to install Windows WD 2003? [note: WD = World Domination edition.] Then during the installation process you are asked to "sign" the bootloader and maybe other code.

      Suppose you could control all of the code that runs on your computer? No more spyware? (This would be bad for AdAware, as there would be no more need.) Simply don't sign any spyware. Withing being signed, it won't run. This would require an OS that only runs signed code. But you see the principal I'm getting at here.

      Suppose it were you who had the signing keys and were in control of the code that ran on your own hardware?

      It seems to me like we already have part of this sitation today. At least, today we are more or less in control of what runs on our own hardware. But DRM wuold not be possible, because you the user could run code of your choosing. You could also subvert the DRM code of the **AA's.

      So then, it seems like the two principal reasons for Palladium are:
      1. Control what code runs on the hardware
      2. DRM
      And we aready have benefit 1 today, then the only reason for Palladium is number 2.
      --

      I'll see your senator, and I'll raise you two judges.
    3. Re:The issue here is by squiggleslash · · Score: 2
      I'm not quite sure why you've been modded up to the degree you have. An off-topic ad-hominen anti-Stallman rant is usually a sign of a poster that's gone a little off the wall. Let's deal with that first:
      Your argument reminds me of Stalman's contention that all software should be free/open. How can you be an advocate of freedom if you maintain that nobody should release closed-source software (are they not free to do so?)
      I believe that people should be allowed to use recreational drugs. I don't think they should use that right, but I don't think they should be forced not to, on pain of punishment. Am I, therefore, oppressing drugs users? After all, I believe people shouldn't take them which, if the logic above is anything to go by, is enough to turn someone into a jackbooted dictator.

      Even though if you believe that RMS, given a day as President, would sign into law a proposal that all software be source-available with the right to modify and/or redistribute available to all, your argument still has severe problems. To abolish slavery, you must ban the practice of keeping slaves. Are people who propose abolishing slavery not advocates of freedom?

      Proposing that everyone be given rights cannot be seen as contradictory, as giving people rights of any type, including that of freedom of speech, that of the right to possess a weapon, etc, can always be seen as restricting the power of others to curtail those rights. That's what "free software" is about.

      Their crap becomes the defacto standard that everybody else follows, for better or worse. Alternatives tend to shrink or disappear over time. Most people here on the dot probably like PGP/GPG. But if Microsoft incororated those into Office and said you could only share documents with people who also had it installed, and had the proper keys (given to you by Microsoft, after you 'signed' a EULA,) then you'd hear the same complaints. And those complaints would be legitimate.
      The issue with Palladium is not that it may become the de-facto standard, but what problems Palladium itself might cause. Palladium will effectively make development of applications much more difficult, and restrict it to a small group who are willing to pay through the nose for specialised hardware. It'll relegate software development to the same kind of specialisation and professional backing that, say, movie making or book publishing entails. And this is what will restrict freedom: you will no longer be able to have source code based operating systems, and open source and free software development will by necessity dwindle as the number of people with suitable hardware will reduce.

      I don't really care about Microsoft putting together a secure OS or creating a standard for secured software. But unquestionably, what they're actually proposing could be a serious danger to the future of a particular type of software development. It will stifle innovation, raise the entry bar for programmers, and turn computers into unfathomable black boxes.

      Scary.

      --
      You are not alone. This is not normal. None of this is normal.
  29. Re:No Worries by SirSlud · · Score: 2

    Have you forgotten that "monopolies" are LEGAL? And MS is one? Dont you think its a little obvious MS has a monopoly on OSes? Man, sometimes I have a hard time distinguishing between religious folks and people who place their faith in uber-free markets.

    --
    "Old man yells at systemd"
  30. Why hardware? by interactive_civilian · · Score: 2
    The parent poster makes some very interesting points IMHO...but I have only one question...

    Why does this new crypto-system have to be implemented through hardware?

    As far as I am concerned, Microsoft can push Palladium all they want (I don't use their products anyway) and put all of the crypto and DRM stuff in as they want as long as they do it only as software...for me, it is the hardware part that bothers me (not that I use any x86 hardware either), because it seems to have (as just about everyone has noted) a very strong potential for abuse by certain monopolies. As long as it is hardware, then people are free to switch... But if the two leading CPU manufacturers implement this kind of thing in hardware, then the options are severely limited.

    Of course, if this does happen, and (an even bigger if) Apple decides to lower their prices, then I have a feeling that they won't be able to produce computers quickly enough to satisfy the new demand for non-DRM hardware (assuming they don't jump on the bandwagon).

    Anyway, just my stupid, uninformed opinion. Feel free to tear to shreads.

    Cheers. :)

    --
    "Empathise with stupidity, and you're halfway to thinking like an idiot." - Iain M. Banks
  31. Re:much more informative articles. Really? by Hacker+Cracker · · Score: 3, Insightful

    I hate to break it to you, but Steven Levy is nothing more than a cheerleader for Microsoft. He is about as biased a writer as you're likely to come by when it comes to issues like "intellectual property".

    I lost all respect for the man when he published an article that was a play on the 'first they came for X and I did nothing ... then they came for me.' idea (he was comparing himself as a victim of copyright infringement to a victim of the holocoust).

    -- Shamus

    Bleah!

  32. A little paranoia's good, but... by blinkylights · · Score: 4, Insightful

    ...the Palladium paranoia is getting out of hand. Among my friends and family who actually use MS products, I have sensed a growing mistrust and sense of frustration with Microsoft. (I know quite a few ppl who have converted to Macs or they've asked me to help them get into Linux). M$ is right to worry about their (well-deserved) bad rep on security. But from where I sit, people aren't thinking, "I can't trust my operating system," people are thinking, "I can't trust Microsoft." Microsoft, despite what seems like an unshakeable monopoly, just doesn't have the credibility (yes, among the general populace, not just among us slashdotters) to make this draconian Palladium/Trustworthy Computing progrom work. There are more than just market forces at work here, folks... there are those ever present Darwinistic survival-of-the-fittest forces at play, too. I think the article (the original poster is right, show it to your boss) underscores the fact that although M$ has a monopoly, it is not without competition. Individuals, corporations and organizations who give themselves room to DIY, and don't get too locked-in by M$ and others, have big advantages over those who do. You don't have to be a cranky paranoid slashdotter to see that a printer cartridge you can refill is better than one you can't, even if you don't have the sense to be indignant about evil lock-in tactics. Sheep are sheep, but you can't drive them over a cliff.

  33. Re:Paranoia by Jester1023 · · Score: 3, Insightful

    If something's for sale, and I purchase it, I would like to believe that it's for my use. Example. I purchase a car. Mine to drive, modify, and use as I see fit. I don't have a rep from Ford checking to make sure I'm using only Ford Approved Parts, and ready to tow my car away if he finds I'm using something that doesn't have the Ford Seal of Approval. I have no problem with paying for something that I find to be useful. I have a problem with buying something that has its' usefulness to me curtailed by design. When I have to call my Microsoft Mommy and say "Mother May I?" to install something new in my computer is going to be the day I finally get off my ass and switch over to Mac.

  34. Re:No Worries - Naive logic by ackthpt · · Score: 5, Insightful
    It's not going to happen ... stop worrying. Microsoft would have to take control of every motherboard, chip, and card manufacturer to do that. Can you say "monopoly?" Don't you think it'd be a little obvious?

    What's obvious is you haven't been paying any attention. The whole PC hardware industry is geared towards making the pieces of junk that will host Microsoft's operating systems, instead of truly inspired hardware designs. The reason? To avoid being shut out for NOT being able to run what everyone else is running. Microsoft says jump and AMD/Intel/VIA/Asus/etc. say, "how high?"

    --

    A feeling of having made the same mistake before: Deja Foobar
  35. oops...correction by interactive_civilian · · Score: 2
    Somewhere up there it should say:

    As long as it is software, then people are free to switch...

    Sorry. ^^;

    --
    "Empathise with stupidity, and you're halfway to thinking like an idiot." - Iain M. Banks
  36. Cage match by Kushana · · Score: 2, Insightful
    What kills me is that this initiative is from the same people that brought us email and Word macro viruses because they wanted more code to run on our machines, and now I can't turn off HTML email in Outlook.

    What I'd like to see is those guys and the Palladium guys fight it out at Microsoft first, before they deliver us an OS that makes sure that the spam and Disney advertising gets through, but nothing else.

    --

    Careers should combine three things: what you can do, what you want to do, and what you can get paid for.
  37. You exagerate the political strength of IT by nkyad · · Score: 2, Interesting

    While there is a case to be argued about the use of company resources for personal benefit, I believe you are failing to consider all the factors leading to the PC revolution in the workplace.

    Those old, slow, overpaid and overstaffed IT departments that were shot down in the eighties died because, once computers became cheap and powerful enough, the mere mortals in accounting and marketing wouldn't have their work controlled by a bunch of nerds. I find it hard to believe these guys will be willing to give the control back to a centralized entity.

    Even the supposed benefits of control won't be enough when Jane from marketing and Will from sales go over the CIO head and tell the CEO that those same nerds are again hurting the company profits with their new policies and controls. And that, by the way, the new product launch will be postponed because the nerds couldn't deliver the new server in time for the website launch.

    1. Re:You exagerate the political strength of IT by DickBreath · · Score: 2

      Those old, slow, overpaid and overstaffed IT departments that were shot down in the eighties died because, once computers became cheap and powerful enough, the mere mortals in accounting and marketing wouldn't have their work controlled by a bunch of nerds.

      An excellent point.

      I am old enough to remember the story of the software tial that wagged the hardware dog.

      With the appearance of VisiCalc, you began seeing the proliferation of Apple ][ computers on the desks of people in corporations. They only used one application. The machine was like any other single-use office machine, e.g. a typewriter.

      But they didn't have to kiss up to the mainframe people to get something done. (I don't think they were called IT departments back then. But I was not in that particular culture, so I could be mistaken. I was a kid fresh out of college writing software for these new microcomputers, before the IBM PC.)

      --

      I'll see your senator, and I'll raise you two judges.
    2. Re:You exagerate the political strength of IT by weave · · Score: 2
      I'm not so sure. Management is growing very leary of employee time waste on desktop PCs. All IT has to say is that they can't ready the new server in time for the website launch because they are too busy having to fix desktop computers because staff keep screwing them up by loading crap like webshots on it, and you'll see how fast management says "Damn it, the computer is a company tool like the telephone, we can't have this."

      Many companies already have a standard PC config that is locked down so much that employees can't install or modify it as it is.

      Sorry, the nerds are back, with a vengence... I agree, it really sucks. I am in IT management, and the struggle to allocate my short-supply tech resources to best serve my company unfortunately requires me to be a real jerk to end-users at times. My ultimate responsibility lies with the big picture in the company, not joe or sally's satisfaction unfortunately. It sucks, I can understand why so many hate us.

      However, all is not lost for the anarchists. The latest bane of IT staff everywhere are PDAs. Download all the corporate secrets to them and walk out the door. Currently very difficult to control them...

  38. Re:The real base of the problem by uncoveror · · Score: 2

    Neither a centrally planned economy, not pure unrestrained capitalism works. Regulated markets are the best we can do. Greed is evil, and self-destructive, but with nothing in it for me, I won't get off my ass. We must forever struggle to find a balance.

    --
    The Uncoveror: It's the real news.
  39. Comment removed by account_deleted · · Score: 2, Insightful

    Comment removed based on user account deletion

  40. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  41. What I think by nuggz · · Score: 3

    Both are more likely than you might think.

    Not really, I am almost certain people will buy this crap by the truckload for pennies of savings. I also think most people would rather complain about their rights being taken away then spend pennies buying the unencumbered hardware.

    1. Re:What I think by Jeremi · · Score: 4, Funny
      Not really, I am almost certain people will buy this crap by the truckload for pennies of savings. I also think most people would rather complain about their rights being taken away then spend pennies buying the unencumbered hardware

      Have you heard of DivX? (the hardware, not the file format) No? Why not? ;^)

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    2. Re:What I think by kcbrown · · Score: 2
      Have you heard of DivX? (the hardware, not the file format) No? Why not? ;^)

      Because DivX players were more expensive than regular DVD players. That, combined with the requirement of hooking the thing up to a telephone line, is why it failed. Has little or nothing to do with freedom or rights, and everything to do with price and convenience.

      --
      Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
  42. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2


    1> Run Linux?

    Yes. You just won't be able to use the Palladium features of the processor, this has already been discussed previously.


    However, with things like SCCCA and CBDTPA recurring every few years, don't you think you're being a bit naive?


    2> Run Gnutella?

    I don't see why not. But now you'd actually be able to use it for legitimate file-sharing rather than pirating MP3's and other programs, because the content of the musicians would be protected..wait, you don't pirate things do you?


    I do see why not: who said that M$ *had* to give a certificate to anything? Five years after this sucker is adopted, how much do you think it is going to cost to get Microsoft to sign a piece of software? $500? $5000? $5,000,000?


    3> Run Freenet?

    That would kind of mean that Microsoft would have to use the chip to block a Java VM from running, and I don't really think Sun would like that..I'm guessing that didn't cross your mind.


    Java? Big, big security hole there for DRM applications. Hell, interpreted languages pose a big risk:

    10 INPUT $A
    20 PRINT $A

    being a perfectly functional DRM circumvention device, and all.

    Sorry, but I don't think you're seeing the big picture, politics and culture included it's pretty obvious at Palladium is a Very Bad Thing, even if technically it looks OK at some levels.

    We're seeing the thin edge of the wedge, don't forget that.

  43. Re:That argument only works if theres no alt.s by nuggz · · Score: 2

    Don't like car prices, don't buy THAT car.

    People buying $30k SUV's complain about the cost of cars and gas.
    Buy the $10k 2L engined car then. Or a moped, or a bike, or a bus pass.

    Microsoft has a partial monopoly because nobody wants the alternative. Enough people want something else, and Linux is becoming a viable alternative.

    The don't buy it is your action, it isn't an excuse. People need to realize that the cost of dealing with MS is less then the cost of using an alternative, and THAT is why they are where they are, and that is how they sustain their monopoly.

    We could all go install Redhat with openoffice tomorrow, but it just isn't worth the trouble, or else we WOULD.

    Personally I don't buy it, because it doesn't offer a benefit which exceeds its cost.

  44. capitalism isn't here by BlueboyX · · Score: 2

    If were were dealing with straight capitalism, we would just sit back and laugh at things like this. But things like monopolies subvert the normal functioning of capitalism, which means the mechanism to 'punish' stupidity in the marketplace are subverted. So nobody is laughing (except Gates).

    --
    "Never, never suspect the dreams within the dreams of dreaming children." ~The Amazon Quartet
  45. Er, no, other complaints by Interrobang · · Score: 4, Insightful
    The only complaint people seem to have is that if the general population buys into this, then we won't get the discount of commodity hardware.

    To you "discount of commodity hardware" is the only complaint?! Gee, the vast majority of the complaints I've been seeing (even here on /. where just about everybody is completely politically antithetical to me -- and I'm concerned about the same things!) are things like:

    invasion of privacy

    erosion of Fair Use Rights

    the rights of content creators (my complaint), as opposed to the alleged rights of corporative entities like the RI/MPAA

    total Microsoft domination of the OS market through a hardware wedge

    the possible virtual elimination/obsolescense of the GPL, and/or (GNU/)Linux

    And here's a new one: jurisdictional misuse to enforce the DMCA (a US law which doesn't bind those of us outside the US) through hardware. Do you really think all those big US-based hardware manufacturers will make one version for the US and one for the rest of the world? Heh. In my country, we don't have a DMCA...(yet)

    Funny, I don't see any (purely) "money" issues in there at all. Then again, as I've said before, there are some things that just don't come down to money, especially since it's damn hard to put a definitive price tag on rights (whether "inalienable" or not) and freedoms, except maybe (as Tom Jefferson said) "eternal vigilance."

    1. Re:Er, no, other complaints by nuggz · · Score: 2

      invasion of privacy
      erosion of Fair Use Rights
      the rights of content creators (my complaint), as opposed to the alleged rights of corporative entities like the RI/MPAA
      total Microsoft domination of the OS market through a hardware wedge
      the possible virtual elimination/obsolescense of the GPL, and/or (GNU/)Linux



      These are only issues if you buy this new controlled hardware, if you buy the current standard hardware you won't have a problem.

      If this new stuff takes over the market, the unencumbered hardware will become an expensive niche product. It may become so expensive that nobody is willing to pay for it.

  46. Re:Paranoia by jaaron · · Score: 2

    No it isn't. The hardware and software Microsoft is proposing would control ANY software, not just pirated software. If Microsoft wanted to edge someone out of the market, they could just make it possible that that software wouldn't run on your computer. Illegal or not.

    Did you read the article? It's like the example they give about printer cartridges: I can legally buy a refill kit for a printer cartridge, but if the cartridge contains a chip that can tell if it was refilled (and consquently refuse to work), then my legal refill kit does nothing for me. And the inventor of the kit is pushed out of the market. Microsoft's technology is along the same line -- it limits your freedom and discourages innovation.

    --
    Who said Freedom was Fair?
  47. understand but disagree by BlueboyX · · Score: 2

    Yeah, I understand what you mean. Alot of the features MS is working on would actually be pretty cool (assuming they work properly).

    The problem is that the reality won't match the claims. The thing won't work properly; that is pretty much a given. However, even worse than the probable bugs is the fact that everyone will have to trust a company that consistently has proven itself to be NOT trustworthy and that freely exploits any advantages it has. That is what we are worried about.

    --
    "Never, never suspect the dreams within the dreams of dreaming children." ~The Amazon Quartet
  48. So when the bell rings & I get a shock by gelfling · · Score: 2

    Is it to get me to do something or is it to just to give me a shock? This dog brain is confused?!?!?!

    I can't wait until its a law that my home alarm system has to be MS run and they get to decide who comes and goes into my house. Perhaps we'll have to license our own existence by them.

  49. Re:Paranoia by jaaron · · Score: 2

    True, theft is wrong, period. I don't steal or bootleg any of my computer software, however, that doesn't mean that I'm not against DRM technology. If anything, the courts should decide whether or not my use of some software is legalNOT a software company trying to squeeze every last penny out of me.

    The problem with most DRM schemes is that they go too far. They make perfectly legal activities impossible. They allow corporate interests to dictate how I use equipment and software that I paid for. That I own. Now there is a very good point that people can make stating that, well, if you don't like that particular technology in so-and-so company's product, then just don't use them. Fine, okay. But when so-and-so company represents a monopoly and uses this technology to effect the market place and drive out competition, then that's wrong. In fact, it's illegal. That's the problem.

    --
    Who said Freedom was Fair?
  50. not quite by BlueboyX · · Score: 2

    As I understand it, you can run unsigned code on Palladium. In the patent for their funky new OS, the features MS lists are maily for keeping unsigned codes' hands to itself. Unsigned code can't mess with signed/secure data on the hd or in ram. But it can still run; you can still have that functionality. Your current version of mame will still happily run.

    --
    "Never, never suspect the dreams within the dreams of dreaming children." ~The Amazon Quartet
  51. Re:No Worries by jaaron · · Score: 2

    Unfortunately, that doesn't seem to matter as we can see in the way the current Microsoft lawsuit is being handled. If that lawsuit didn't stop them, why would they worry about pushing around the government and the people again?

    --
    Who said Freedom was Fair?
  52. Mod Parent Up by jaaron · · Score: 2

    I wish more people would figure this out.

    --
    Who said Freedom was Fair?
  53. Any bets... by Jeremi · · Score: 2
    1. On how long before the first Palladium "crack" appears?
    2. On how long before the first Palladium-based virus appears?

    I'll bet we have examples of both before Palladium is publicly available.

    --


    I don't care if it's 90,000 hectares. That lake was not my doing.
    1. Re:Any bets... by 1010011010 · · Score: 2

      I'd like to see a virus that deletes or corrupts the WPA database...

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  54. Re:Paranoia by 3141 · · Score: 3, Insightful

    How they are unfounded? When someone can't copy their own work for fear of hurting someone else's profits, they have lost their rights on that matter.

  55. Re:That argument only works if theres no alt.s by Jeremi · · Score: 2
    We could all go install Redhat with openoffice tomorrow, but it just isn't worth the trouble, or else we WOULD.

    Would we? You're assuming everyone is perfectly rational, and has access to all the information needed to make the correct decision. When it comes to computer software, however, most people are "lost in the dark", and so they stick with what they know works, even if something better does exist.

    --


    I don't care if it's 90,000 hectares. That lake was not my doing.
  56. Re:That argument only works if theres no alt.s by nuggz · · Score: 2

    They are "lost in the dark", the cost of changing (including the risk) is greater then the benefit, so they don't.
    Their irrationality just changes the values of particular actions.

  57. Comment removed by account_deleted · · Score: 2, Insightful

    Comment removed based on user account deletion

  58. There is really nothing we can do about it by thasmudyan · · Score: 2, Interesting

    I'm writing this posting on a WinXP machine. Before I had Win95, I used 98, then 2000 and now XP. With nearly every upgrade or patch our freedom as users has been decreased ever so slightly. As it is a gradual process, no one will really notice (no, ./ geeks don't account for a substantial amount of Win users) and it is really hard to draw the line. When is enough enough? The big pro in MS products is their usability. As long as the UI stays ahead of the rest users WILL accept the gradual decay of their freedom without so much noticing it.

    Maybe I can't speak for the majority of Slashdot users out there, but with every Windows version I owned I thought: 'This is going to be my last Windows version. I'll make the switch after that. This new crap has crossed the line.' And EVERY time I went back and bought the new crap because I could get my apps running easier, because I could play my favorite games, or simply because the UI allowed me to be more productive.

    As long as MS leads the industry they WILL shove this stuff down our throats and we WILL swallow it. I can imagine EXACTLY what this future will look like. The bad thing is that the public will see nothing bad in it. And if someone objects just label him as a terrorist...

    1. Re:There is really nothing we can do about it by Arcturax · · Score: 2

      No there isn't but, really, this is a fools dream. People won't like this, people will complain about this, despite the fact its hardware based, people will find ways to break it or otherwise copy the protected data and release it in unprotected formats. This will cost a lot of money to Intel and other companies and eventually they will see that its a misrible failure and stop including it in their chips and use the space to add more transistors or features that consumers REALLY want.

      --

      --Won't that be grand? Computers and the programs will start thinking and the people will stop. - Dr. Walter Gibbs
  59. Re:Palladium... Isn't it the thing RIAA asked for by danro · · Score: 2

    Damn! You mean Adobe will stop selling Photoshop for Linux?
    Next thing you'll probably tell me that Microsoft will recall MS Office for Linux too!

    ...oh, wait.

    --

    "First lesson," Jon said. "Stick them with the pointy end."
  60. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    CODE DOES NOT HAVE TO BE SIGNED BY MICROSOFT TO RUN.

    TODAY code does not have to be signed by Microsoft to run.

    TODAY.

    Do you get it? How long, given the continued moves to foist DRM on us, do you think it will be until all code requires a "DRM-OK" signature to run? The potential for new law changes the light in which this technology must be seen, and you're being an ahistorical dimwit by talking about the present as if it protects you from the future.

  61. Consumption and Citizenship by wytcld · · Score: 2

    Yeah, the whole consumer thing is scarey. Seems like politicians more often voice their concerns for 'the consumer' than for 'the citizen.' And about the only concern they have for the latter is that (s)he be a 'productive citizen,' normally translated as playing a role in cranking out stuff for 'consumers.' It's as if our whole civilization is being reduced to an eating (consuming) disorder - except of course civilization is also having a problem (especially in the States) with its bowels.

    If someone would keep track, I'd be happy to cast my future votes for whoever among politicians says 'the consumer' the least. Much as I like the physical world, 'the consumer' just translates to 'slave and addict to commercial output,' which doesn't quite equate to 'appreciator of what has real value in life.'

    To bring this back to topic, the issue is enforcement of commercial value over real value in our stuff, which will further alienate commercial value from real value - which long term is not at all good for commercialism. The severe anti-material turn that produced the Middle (aka 'Dark') Ages was the longer-term reaction to the crassness of Roman commercial culture, towards the end of which citizenship was also devalued on the excuse of needing to strengthen the Emperor's hand to meet the threat from barbarian terror.
    ___

    --
    "with their freedom lost all virtue lose" - Milton
  62. Re:forced upgrades v/s allowed upgrades by johnlcallaway · · Score: 2

    If they can control what authorized software is, that means they could authorize software to run for only a certain period of time, forcing you to upgrade.

    I wish Microsoft would take the Sun Solaris approach, where programs that ran 5-7 years ago are guaranteed to run on the latest platform. Sun upgrades are available, and I pay for them. But that also gives me 24x7 support. If I don't want to upgrade, I don't have to and everything works fine.

    I wouldn't mind paying several hundred dollars a year for a software subscription if decent support came with it.

    --
    I rarely read replies, it's my opinion and if you thought about your opinion a little more, I'm OK with that.
  63. Re:Paranoia by 3141 · · Score: 2

    If only we were. The whole issue is that the new systems are going to severely restrict what the users can do, for fear of them breaking the DMCA.

    Still, this kind of nonsense has been around for years. Why should an independent musician wanting to record his own music have to pay some other record company a levy on the blank media he uses?

    All this nonsense is interlinked. On one side, you have the perceived problem of copyright infringement of things such as music and film, and on the other side you essentially have certain technology companies trying to appear to be combating this problem. What they are really doing is extending their control over the computers of other people.

    Do you *really* want a computer that can only run pre-approved software?

  64. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  65. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  66. Bullshit! by maynard · · Score: 5, Insightful
    But then again, my take on the whole thing is that Slashdotters are largely worried about not being able to pirate music anymore.
    I don't pirate music, video, or even books. I do use my public library. WTF do you think will happen to our public libraries once DRM is mandatory across the board? I suppose you would claim that's a "fair use" right which "never existed" (except in the minds of certain supreme court judges).
    All DRM is going to do is prevent people from copying data and/or code in ways the author has deemed inappropriate.
    Right. And who is the "author"? Microsoft, which has been convicted of anti-trust violations as a monopolist. Why should I trust them not to limit how I might use a computer which happens to be running a commercial OS? Or any other single signing authority? I consider one government or corporate bureaucracy controlling all digital rights management on my computer to be autocratic, authoritarian, and anti-consumer. It takes the "personal" out of personal computer and replaces it with "consumer playback computing device." As long as you keep paying, and paying, and paying. Fuck that!

    Frankly, I can't see any difference between this and the previous Clinton administration Clipper Chip proposal from eight to ten years back. Except that now instead of the government having control over signing digital certificates we have a single private corporation. That's freedom for you! One further point: you state the system will only be used to control copying of content. Since the most fundamental operation of a computer is to copy, as in moving a byte from memory to a register for example, isn't by definition this also a mechanism to control how one may USE said content? Even if the content is something you created on your own?

    I find it utterly amazing to read such large numbers of libertarian conservatives -- folks who presumably support individual liberty and non-authoritarian government -- so easily willing to cave into the demands of huge private corporations at their own detriment. Institutions so large they generate a revenue stream larger than most third world governments, and who clearly use the same monopolistic and exclusionary tactics so hated by the conservative right when the issue turns to government monopolies. And before anyone brings up the fact that government has guns while Microsoft (Disney et all) doesn't, might I point out just who they're buying off in order to obtain the legislation which will force us all to use their cripple-ware?

    --Maynard
    1. Re:Bullshit! by 0WaitState · · Score: 2

      A side effect of Palladium that nobody seems to pick up on is that it will make feasible the distribution of use-count limited content. You download a movie or album, and it is only allowed to play a limited number of times or days until your "license" expires. Having strong, trusted software signature capability on the motherboard means that Circuit City's DIVX model will work without requiring users to buy hardware or plug in a phone line. If you try to hack the content to reset the use-counter, it no longer passes the signature check.

      Now, what odds RIAA/MPAA would distribute limited use content at a steep discount to unlimited use? I didn't think so--expect to pay 50-80% of a current CD/DVD price for your 20-use wav or 3-day movie license. And forget about loaning a CD to a friend, or taking it into your car.

      --

      Remain calm! All is well!
  67. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  68. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  69. First ever Palladium hacker SQL code : by rixster · · Score: 2

    insert into permissions values ("All","Copy / Rip","DVDs")
    delete permissions where user = "billg"
    delete permissions where company = "microsoft"

    --
    Two wrongs may not make a right, but three ....
  70. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  71. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  72. Palladium would be ok with an opt-out option by scharkalvin · · Score: 2, Insightful

    If Palladium's goal is to increase security then it is a worthy idea, but not if users can't control it. Put an entry in the computers bios to allow the depth of control the hardware will allow. This is sort of what we have now with bios virus detection. You have to turn this off to install some software, you can turn it back on when the system is up and running. In an IT setting the computer bios could be set to allow such hardware control, the bios password could be setup and users wouldn't be able to mess with the settings as the ID dept. would hold the passwords. End user geeks would be able to do what they want, opting out at their own perl to viri that the hardware/software would protect them from.

    Of course the virus writers could steal signatures and the whole system would be for naught. When you consider that PC hardware is used in embedded products with custom software it becomes clear that an opt-out to Palladium hardware is needed or this thing just won't sell. Want to run Windows? Then you might HAVE to opt-in. That's ok, if your trust MS.

  73. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  74. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    Ok, Sparkey, let's zoom back a little:

    DRM is a what.
    Palladium is a how.

    We both know that a general purpose computer cannot be made secure for DRM purposes - somebody can write a program which copies files at an arbitrarily low level and defeats your DRM features.

    If the government mandates DRM on computers, M$ simply locks Palladium down so that code which has not been signed DRM-OK will not run, claims compliance, and its all over.

    What part of this don't you understand?

  75. Go home, shill by marxmarv · · Score: 5, Interesting
    Palladium is an open architecture (I mean, on paper, that is).
    Not if it's patented. Go search on www.uspto.gov for "digital rights management operating system".
    It doesnt exisit yet, but the idea is that its not just MS running the show - anyone could be the authority you trust - hell it could be the FSF!
    Incorrect. The system as described in Microsoft's patents is based on the premise of transitive trust: BIOS trusts hardware, OS trusts BIOS, application trusts OS therefore application trusts hardware.

    One problem is that it's impossible to ship such an OS with a level of trust that preserves competition. If only MSFT is trusted by default, and a scary message must be acknowledged before trusting other parties, most users will use only MSFT software. If only MSFT and people it trusts are trusted by default, and a scary message must be acknowledge before trusting other parties, MSFT gains a lot of power over what people do use (and trust can be centrally revoked, enabling MSFT to partake of a number of slimy business models). If VeriSign or similar is at the root of default trust at the OS level, and a scary message must be acknowledged before trusting other roots, shareware/freeware authors have to pay a tax to VeriSign to create their applications, thus stifling innovation. If no scary message is printed at all, then the point of the whole system is moot.

    Anyone can be a trusted source - anyone! This is about hardware enforced trust, not MS literally signing every piece of code that runs on your box.
    Have you tried as an individual to get an Authenticode certificate from VeriSign lately? They won't do it because of half-assed reasoning that includes the two meaningless trump words "national security". If, as you claim, this project is about "hardware enforced trust" then how does a user attempting to insert their own hierarchy of trust distinguish themselves from a virus (or, heaven forbid, a competitor) attempting to insert its own hierarchy of trust?

    This is about software trusting hardware and software trusting software. The hardware doesn't need to trust anything, and hardware trusting software is a well-researched and well-practiced problem which requires nothing short of potting whole systems in epoxy to foil attackers. Read Microsoft's patents, not Microsoft's propaganda.

    You are correct - this is the same idea as "smart cards" except that its for the masses.
    This has nothing to do with the problems smart cards solve. Smart cards attest to the identity of the user, and as people are movable it makes perfect sense for these to be movable as well. Palladium's version of trust has nothing to do with a user proving their identity and only with proving a computer's identity. People don't care about a computer's identity. State-sanctioned spies, content vendors, corporations, software and software vendors do. What does a secure real-time clock do for the average user? Nothing. This is not about solving problems for the end-user.
    Releasing the code and a full specification, especially if the code is BSD-licenesed, will prove that MS's intentions and implementations are designed to elevate the entire industry, not just MS.
    Incorrect. If there is a patent on loading and identifying a digital rights management operating system its use is governed by Microsoft's licensure of that patent. If systems will (as feared) fail to allow use of the cryptographic processor or potentially even the entire system unless every stage of the boot trusts the next one by signature, that seriously degrades the user serviceability of open-source OSes. If users can set the secure real-time clock then it's clearly not secure. To top it all off, Microsoft is not known for handing out code under terms that allow modification or redistribution, and I fully expect the Palladium source to be released under the same viral "shared-source" look-but-don't-compete license as the CIFS specification and MSDN.

    At this point MS could go closed, proprietary, only good for Microsoft, or it could go for open, wide-ranging, available for everyone. It looks like they are learning towards the latter.
    History has shown they open things just enough to get maximum traction in any particular campaign. I suspect that, as they have done historically, they will disclose just enough info to allow them some slimy claims about openness and then aggressively leverage those claims to gently or brutally exclude competition on many levels.

    This initiative has nothing to do with consumers except to ensure they consume and pay for the privilege.

    -jhp

    --
    /. -- the Free Republic of technology.
  76. What "the content publisher wants". . . by kfg · · Score: 2

    has little to do with anything outside of the software industry.

    As it happens there is over two hundred years of copyright law defining the *limited* rights of the copyright holder and asserting, in explicit terms, that the copyright holder's "wants" have very distinct boundries.

    You, as the purchaser, ( yes, outside the software industry items under copyright protection are still *purchased* by the 'consumer'), have very distinct *rights,* ( not priviledges, rights), to act with and upon such 'content' even against the copyright holders 'want.'

    Have to abide by what the publisher wants? Where on EARTH did you get the idea that anyone is so constrained?

    In the words of my dear, sweet, departed granny, " Fuck that shit!"

    KFG

  77. Let's not panic, folks... by Simon+Brooke · · Score: 2
    Having given this some thought, I still think Palladium is a very bad thing as far as I'm concerned, but I don't believe Microsoft is going to be able to cram it down our throats.

    Anecdote: yesterday, I phoned one of my suppliers to order a new machine with a dual athlon plus SCSI motherboard. I asked him how many he'd supplied and what operating systems they'd had on them. The answer was thirty-five, and all various versions of Linux. It strikes me that probably ninety odd percent of dual athon machines are running Linux, but at least four manufacturers are producing motherboards. Which tells me that there's enough market for Linux machines - even at the high end - for the capitalist system to go on producing them. Furthermore, none of these motherboards makers are headquartered in the United States. So no matter what Senator Hollings manages to impose in the US, the rest of us will still have usable computers.

    Seen from this point of view, Palladium may on balance even be a good thing. Lusers who aren't fit to be trusted will get computers which they can't break, and the rest of us will still be able to buy computers we can...

    --
    I'm old enough to remember when discussions on Slashdot were well informed.
  78. I forcast Two kinds of boxes. by Technician · · Score: 3, Interesting

    1, The entertainment commerce X-box/Cable/Sat TV box/Subscription Web Browsing appliance box which needs a subscription to use. Even the video link to the monitor and Audio link to the speakers will be bidirectional handshaking encrypted data links. A sniffed copy of the data stream will not play back on another device, or the same device at a later time. It's a pay to play format protected every inch of the way by encryption.

    2 General Use computers for word processing, spread sheets, hacking, photography, piracy, CD ripping (you know the obsolete format), low resolution TV recording (Not HDTV digital after 2007) and non-subscription web browsing. This second box will be locked out of the new media formats and trusted commerce standards. New media material will not be released in open formats. Windows, Mac, and Linux fall into this latter catagory. Non protected media content will be barred from the internet at strategic choke points. Media trading in this format will be prosicuted to the fullest extent of the law.

    --
    The truth shall set you free!
  79. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  80. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    Re-read my post, dimwit.

    Things change. Today, the user decides. Tomorrow, it may be the Feds, or Micro$oft, or somebody else entirely.

    You act as if the policies can't be changed once the architecture exists, and that is why I call you stupid.

  81. History and DRM by jhines · · Score: 2

    Historically "optional" in the digital rights world means "will be required by contract".

  82. Re:Relax, everybody... by JohnA · · Score: 2
    Yeah, that'd be great, except that MS is releasing all the source to Palladium.

    It would appear that the "jack ass", as you referred to the original poster as, has a point.

    Even though Microsoft is releasing all of the source to Palladium, what proof do we have that the binaries that are distributed are built verbatim from the sources provided? None.

    The reason that source is distributed is so that you have, if you so desire, the tools necessary to verify the functionality of the code, then build a binary from the code that you just completed verifying.

    Microsoft is under no obligation to provide you a binary that is built from the sources they provide. You could decompile the binary and compare opcodes against those of a binary built from the provided source, but even that is a faulty solution, since Microsoft is under no obligation to compile the sources using a publically available compiler.

    The original poster may have gone overboard, but I hardly think he is a jack ass.

  83. Re:Palladium... Isn't it the thing RIAA asked for by autechre · · Score: 2


    I don't see why it would only work in Windows. If it's just more hardware on the motherboard, a company selling a piece of closed source software could certainly make calls to said hardware. They might need to distribute a binary kernel module (or partially open, like nVidia) and require you to run it. Some people might not like this idea, but these people probably wouldn't want to run closed source programs either.

    --
    WMBC freeform/independent online radio.
  84. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  85. Boiling a frog by autechre · · Score: 2


    You can get a frog to allow itself to be boiled to death in the same manner. If you place it in a pot of boiling water, it will try to escape. However, if you place it in a pot of cool or warm water and gradually increase the temperature, it will sit there until it has been cooked.

    --
    WMBC freeform/independent online radio.
  86. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    So yeah, of course you moron, things change. But Palladium doesn't change that one or antoher.

    Erm... bullshit. Read some Lessig - Palladium is an architecture - it changes what is possible.

    If DRM is mandated, but manufacturers can't or won't produce DRM compliant systems, the law will fail. If there is an eager, gloating manufacturer's alliance, all ready to go... think of the commercial pressure...

    It's an attempt to abolish competition, curtail freedom of speech and hand over the domestic computer industry to a select few players; you may be lulled into thinking "oh, it's just some crypto hardware for making sure unsigned code can't run" but in the long run (which you seem to be so blind to) it matters.

    You can't legislate the impossible: Palladium makes it possible, which makes legislation mandating it or an equivalent system all the more likely. By changing the landscape of potential, you can change the landscape of the actual.

  87. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  88. The Cost Thing. . . by PhxBlue · · Score: 2

    . . .as George Bush (the First) might have said, will kill this. It's what killed DivX as a competitor to DVD.

    In the hardware market, these Palladium hooks are known as "features." Features cost money. . . so anyone who wants to sell a computer built for Palladium has to explain why consumers have to pay more money for a system that tells them what they can or cannot do with it.

    --
    !#@%*)anks for hanging up the phone, dear.
  89. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  90. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  91. They already crossed the line by arfy · · Score: 3, Interesting

    >> Maybe I can't speak for the majority of Slashdot users out there, but with every Windows version I owned I thought: 'This is going to be my last Windows version. I'll make the switch after that. This new crap has crossed the line.' And EVERY time I went back and bought the new crap because I could get my apps running easier, because I could play my favorite games, or simply because the UI allowed me to be more productive.

    Well, THIS Slashdot user works for a Microsoft Solutions Provider and therefore has access/company purchasing/training on all the Microsoft I can stand, even though I usually work the Unix side of the fence for them. And even though I'm an up-to-date MCSE, at home I back-revved all the Windows boxes to Win98SE. Contrary to what you hear from the Church of Bill, Win2K and its variant/mutant children are NOT more stable, fun or rewarding to use and they're a lot more pesky to nail down regarding matters of spyware, privacy control and consumers' rights in general. And although I have in the past helped maintain my (computer non-literate) friends' boxes for free, I have advised all of them that I will not touch any box with WinXP on it and I'd rather not bother with Win2K unless they have some killer app that absolutely demands it. I have convinced many to backrev to Win98 and without exception, they have benn happier after doing so.

    The new crap crossed the line a while back, around the time the Media Player patches screwed up every other manufacturer's multimedia applications on the box. Enough already! I've got most of my friends dual-booting to Slackware, and whenever their boxes' damned internal Winmodems are supported some of those boxes are going to not be running Windows much, if at all.

  92. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    Palladium changes a lot: the major chip manufacturers and M$ in an alliance to make DRM a reasonable technical and legal reality.

    I'd say that's news.

    And nobody is talking about control of the world: only restriction of the freedoms we've grown used to on the internet.

  93. Re:Palladium... Isn't it the thing RIAA asked for by kcbrown · · Score: 2
    With many (and more coming) big companies and governments betting on Linux, we can hope that it'd be optionnal... Allowing it to be mandatory would be suicidal for all those relying on Linux (like Disney, IBM, HP, ...)

    No. What'll happen is that hardware vendors will offer "unencumbered" hardware for a much higher price than DRM hardware -- because the CPU vendors will charge much higher prices for unencumbered CPUs.

    So if you want to be free, you'll have to pay for it (rather handsomely, I might add). Or you could get DRM hardware for much cheaper. Your choice.

    Guess which choice most people are going to take? Right: most people don't give a f*ck about freedom.

    Oh, by the way, just because the spec right now might say that the computer will boot an "untrusted" OS doesn't mean they won't change the spec later (once the basic technology is entrenched) so that only "trusted" OSes will be allowed to boot -- they will. Count on it.

    And if you think a law won't eventually be passed in the U.S. requiring the use of DRM-enabled hardware (the law will probably be written in such a way that one could apply for and obtain an exemption, and you can bet that the process of getting such an exemption will be very expensive -- so that only large corporations and the very wealthy can afford to get one), think again. Who owns the U.S. government? Right: the large corporations. Most of which would benefit in one way or another from such a law (especially if the exemption mechanism is included).

    --
    Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
  94. it's an idiotic scheme by g4dget · · Score: 2
    There are billions of CPUs in the world--many of them embedded. You can make your own CPUs out of programmable logic. Many embedded CPUs and even programmable logic CPUs are perfectly fine for desktop use. The notion that Microsoft will somehow succeed into getting cryptography and their operating system into every single powerful chip is ridiculous. Microsoft would be destroying much of their developer base, many of whom use at least some libraries or tools that were not developed with Microsoft tools (even die-hard VC++ users use such components). Competitors would be overjoyed if Microsoft were so foolish.

    Now, what will happen is that some CPUs will offer cryptographic code checking, and that some .NET and Java runtimes will do the same for bytecodes. When they run in "normal" mode, they will check that the checksums are OK. I doubt it will help much with viruses or DRM, but, hey, Microsoft is floundering when it comes to security, so they need to do something.

    I think Palladium isn't worth the extensive discussion and fear that it has caused. It's just another hare-brained Microsoft scheme, along with their nth iteration of "the file system is a database" and "intelligent assistants that ask whether your computer is turned on"; nothing much will come of it. And if Microsoft really goes through with it, all the better for the rest of us--there is no faster way than that to give marketshare to PCs based on embedded chips from Motorola--like the Macintosh for example.

  95. USA, land of the free? by Kyber · · Score: 2, Insightful

    I must say I am _amazed_ by how big companies are allowed to cripple civil rights over there. A country previously recogniced as one of the greatest democracies.
    Millions of people have given their lives to protect the rights that you are now giving away because it's profitable?
    Don't get me wrong, I beleive in strong, open market economy. But is that really where you are headed?
    (If I was older, this would be where I'd start talking about "the good old days"... but unfortunately I'm not ;)

    --
    -- Black holes are, where God is dividing by zero.
  96. Depends on the company by GCP · · Score: 2

    At our company, IT has a lot of people building Web apps, corporate data warehouses, etc., a moderate number devoted to the physical infrastructure (keeping the phones, servers, network bandwidth, etc. working), and a handful of "help desk" people in charge of setting up and supporting people's PCs and Macs. They are not, in general, interchangeable.

    Our company has a lot of tech-savvy employees, which is admittedly different from many companies, but we're hardly unique. We engineers don't usually care if the help desk guys want to make and enforce rules about shared resources, such as email or servers. We won't throw a tantrum about not being able to use elm or pine against the company MS Exchange email server.

    But we also won't allow the help desk to control our local apps. Even within IT, the Web apps engineers aren't about to let the help desk guys decide whether they can install Perl or not.

    Things could change. Security risks could increase, networking could make "local" have less and less meaning, client management could become more valuable, etc.

    But for the foreseeable future, I don't see us taking much power out of the hands of the experts (each in his own area) and giving it to these guys.

    I understand the cost-savings of standardized and centralized management of certain things shared by all. But we wouldn't want to overdo it and make the people doing the work we sell less effective in order to make the internal help desk more efficient.

    --
    "Those who have never entered upon scientific pursuits know not a tithe of the poetry by which they are surrounded."
  97. What exactly will happen? by __aanekd3853 · · Score: 2, Insightful

    Besides this, I just read Levy's article in Newsweek. Some things are still not clear to me. How will Intel, AMD, and others implement the hardware? Will the feature be ignored unless explicitly exploited by software, e.g. the OS? Hopefully so, otherwise the new architecture will only run Windows, at least until others catch up.

    And how will others catch up? Even if the security features can be ignored, users will want to use them even if they run, say Linux or BSD. And who among the users of a multiuser system will "own" the processor? We can hardly expect Intel to build respect for UNIX file permissions into the CPU, can we?

    Finally, what will happen if I swap a piece of hardware? What will I have to do to make a new chip do the same as the old one, if they are unique in some way?

  98. Re:Relax, everybody... by JohnA · · Score: 2
    Dude... chill. This isn't a personal vendetta against you.

    My point is that according to the Trusted Computing Platform Alliance, only motherboard manufacturers may include binary code in the protected space of a trusted BIOS.

    The spec, available here in PDF, prohibits the end user from updating this code. So the question is, whose binary will run in this space? My binary compiled from the publically available shared source? Probably not.

    Granted, this is not Microsoft's Palladium, but it is logical to assume that the so-called Trusted PC will be an important part of the actual Microsoft implementation.

  99. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  100. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  101. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  102. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  103. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  104. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  105. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  106. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  107. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  108. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  109. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  110. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  111. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  112. Re:Relax, everybody... by JohnA · · Score: 2
    Okay... I'm going to say one more thing, then I give up. :-)

    BIOS - all that does is control a secure boot up process that loads a few system components

    Exactly. You are correct that saying the BIOS is responsible for bootstrapping, but under Trusted PC, only signed components, whose public key certificate is issued by a CA whose root cert is stored in the unmodifiable area of the BIOS, will be allowed to be "booted". Who decides which CA certs are in the bios, and how does the CA decide which bootstrap component vendors should be issued BIOS certs?

    This is a total chicken and egg problem (as is this point-counterpoint). Eventually, someone other than the user will have to make a trust decision. That is the fundamental problem that I have with Pallidium and Trusted PC.

  113. Good catch, but ... by pyramid+termite · · Score: 2

    ... I should point out that some sources actually say that Ulysses got the Palladium by getting Helen's cooperation. Also several cities copied the Palladium - I doubt that licenses or copyright laws were followed. Last of all, Ulysses was known as a crafty, shrewd man who was "never at a loss" - in fact, as I'm sure you know, the Trojan Horse was his idea.

    It would be a fair statement to say he had the mentality and abilities of a hacker. So, Microsoft named its security model after a theft committed by a hacker of the ancient world.

    Just call me Cassandra.

  114. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  115. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  116. Re:Democratic Vs. Authoritarian encryption schemes by vkg · · Score: 2

    We need the larger DRM debate. That is important.

    I agree. We should figure out what "fixed" looks like before we end up with a proprietary, patent-bound solution from the Ogre of Redmond.

    Not that I wouldn't be worried if Sun were behind this, but we've seen the M$ approach to open systems too often to take this as anything other than a direct threat to the availability of OS-neutral hardware and potentially to the viability of open source all together.

  117. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  118. Re:Democratic Vs. Authoritarian encryption schemes by Chris+Johnson · · Score: 2
    If Microsoft has earned your distrust, isn't it wrong of you to always try and give them a fair shake? It sounds as though you are actively trying to not learn from experience. For instance, by trying to support what they want to do with Palladium, on the principle that they haven't shown malice THIS time and their plans could be construed as nicey nicey.

    Or something.

    Don't ask me, it's not like _I_ make a point of giving them a fair shake with their new proposals. I feel I understand their motives and behavior patterns well enough by now, and that I know what to expect from them.

    After all, these are the people who came up with a twist on 'open source' that, far from being unencumbered, is just as viral as the GPL but carries an opposite payload- namely, legally binding admissions that could be used against undesired software projects for the life of the programmer.

  119. We Are No Longer Free by FreeUser · · Score: 2

    I must say I am _amazed_ by how big companies are allowed to cripple civil rights over there. A country previously recogniced as one of the greatest democracies.

    Yesterday I attended a party in Evanston (a suburb of Chicago). My host asked that I bring a bottle of wine, so I took along a magnum of 2000 Yellow Tail Shiraz.

    5 cops were guarding the entrance end of the platform, searching everyone. Apparently, in the Land of the Free, an adult American is no longer permitted to carry a sealed bottle of wine onto a train (even though I had no cork screw or wine glasses on my person). In other words, if you are too poor to own a car, you cannot transport alcohol, even in sealed form, over any significant distance in this country anymore, especially not on our "Independence" day.

    Fortunately for me the El Train was far less stringently controlled, so while I was an hour late to my friend's 4th of July party, I was at least able to make it.

    We have already lost most of our freedoms in this country.

    We have lost the freedom from search and seizure without due process.

    We have lost (much) of the separation of church and state, which means most minority religions (and non-religions such as agnostacism or athiesm) have essentially lost much of their religious freedom.

    We have lost much of our right to bear arms. Not a personal pieve of mine, but relevant nevertheless since the act requred widespread violation of the constitution and judicial tolerance of those violations.

    We have lost the right not to be detained without charges, without due process, and with access to an attourney. People are now routinely "disappeared" into our Gulag, always under the excuse of anti-terrorism, where they are held incommunicado for weeks or even months. Some may in fact be terrorists, but most are not.

    We have lost numerous personal, daily freedoms (like the ability to take a bottle of wine over to a friend's home who doesn't live within walking distance), many within the last few months.

    Now, through Palladium and/or Disney Holling's DRM efforts we are about to lose our very freedom of speech in the digital age. Based on all of the other lost freedoms, given up in the name of War on [drugs|sex offendors|terrorism], I do not hold out much of any hope for preserving the remaining tatters of the constitution as our illustrious leaders open up Yet Another War, this time on (cracking? viruses? copyright violation? technical savvy that surpasses the FBI's?) Whatever they end up calling this farce, I'm sure they'll find a term that evokes the proper level of fear and dread in the general public to justify the removal of these last, tattered freedoms from our all-too-willing hands, and as one of our founding fathers has warned, we will find in our haste to trade the last of our freedoms for the perception of a little security that we, in fact, have neither.

    Certainly the police stopping me for wanting to take a bottle of wine to a friends weren't protecting anyone, for indeed these encroachments on our liberty have absolutely nothing to do with protection and security, and everything to do with simple Power.

    Unfortunately, by the time the majority of the people understand that all of this nonsense is about an unprecendented Power grab by an unconstitutional secret police (FBI, ), it will be far too late to do much of anything about it. If it isn't already.

    --
    The Future of Human Evolution: Autonomy